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To Lucian Leape and James Reason 


Healthcare has brought us extraordinary benefits, but every encounter and every 
treatment also carries risk of various kinds. The known risks from specific treatments 
are well established and routinely discussed by clinicians. Yet we also face risks 
from failures in the healthcare system, some specific to each setting and others from 
poor coordination of care across settings. For us, as patients, healthcare provides an 
extraordinary mixture of wonderful achievements and humanity which may be 
rapidly followed by serious lapses and adverse effects. 

Patient safety has been driven by studies of specific incidents in which people 
have been harmed by healthcare. Eliminating these distressing, sometimes tragic, 
events remains a priority, but this ambition does not really capture the challenges 
before us. While patient safety has brought many advances, we believe that we will 
have to conceptualise the enterprise differently if we are to advance further. We 
argue that we need to see safety through the patient’s eyes, to consider how safety is 
managed in different contexts and to develop a wider strategic and practical vision 
in which patient safety is recast as the management of risk over time. 

The title may seem curious. Why ‘strategies for the real world’? The reason is 
that as we developed these ideas we came to realise that almost all current safety 
initiatives are either attempts to improve the reliability of clinical processes or wider 
system improvement initiatives. We refer to these as ‘optimising strategies’, and 
they are important and valuable initiatives. The only problem is that, for a host of 
reasons, it is often impossible to provide optimal care. We have very few safety 
strategies which are aimed at managing risk in the often complex and adverse daily 
working conditions of healthcare. The current strategies work well in a reasonably 
controlled environment, but they are in a sense idealistic. We argue in this book that 
they need to be complemented by strategies that are explicitly aimed at managing 
risk ‘in the real world’. 


How the Book Came to Be Written 

We are friends who have been passionate about safety for many years. We did not 
meet however until we were invited as faculty members to the memorable Salzburg 
International seminar on patient safety organised by Don Berwick and Lucian Leape 


in 2001. 
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viii Preface 


The story of the book began in late 2013 with René’s observation that the huge 
technological and organisational changes emerging in healthcare would have con- 
siderable implications for patient safety. Charles suggested that care provided in the 
home and community were an important focus and we planned papers addressing 
these subjects. We began to speak and meet on a regular basis, evolving a common 
vision and set of ideas in numerous emails, telephone calls and meetings. It quickly 
became evident that a new vision of patient safety was needed now, and that the 
emerging changes would just accelerate the present requirements. We needed a 
book to express these ideas in their entirety. 

The particular characteristic of this book is that it has been really written by “four 
hands’. In many jointly written books, chapters have clearly been divided between 
authors. In contrast, we made no specific allocations of chapters to either of us at 
any point. All chapters were imagined and developed together, and the ideas tested 
and hammered into shape by means of successive iterations and many discussions. 

The work matured slowly. The essential ideas emerged quite quickly but it was 
challenging to find a clear expression, and the implications were much broader than 
we had imagined. We were also determined to keep the book short and accessible 
and, as is widely recognised, it is much harder to write a short book than a long one. 
We completed a first draft in April 2015 which was read by generous colleagues and 
presented to an invited seminar at the Health Foundation. We received encourage- 
ment and enthusiasm and much constructive comment and criticism which helped 
us enormously in shaping and refining the final version which was delivered to 
Springer in August 2015. 


The Structure of the Book 


In the first chapter of this book, we set out some of the principal challenges we face 
in improving the safety of healthcare. In the second, we outline a simple framework 
describing different standards of healthcare, not to categorise organisations as good 
or poor, but suggesting a more dynamic picture in which care can move rapidly from 
one level to another. We then argue that safety is not, and should not, be approached 
in the same way in all clinical environments; the strategies for managing safety in 
highly standardised and controlled environments are necessarily different from those 
in which clinicians must constantly adapt and respond to changing circumstances. 
We then propose that patient safety needs to be seen and understood from the per- 
spective of the patient. We are not taking this perspective in order to respond to pol- 
icy imperatives or demands for customer focus but simply because that is the reality 
we need to capture. Safety from this perspective involves mapping the risks and 
benefits of care along the patient’s journey through the healthcare system. 

The following chapters begin to examine the implications of these ideas for 
patient safety and the management of risk. In Chap. 5, we build on our previous 
understanding of the analysis of incidents to propose and illustrate how analyses 
across clinical contexts and over time might be conducted. The role of the patient 
and family in selection, analysis and recommendations is highlighted. 
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Chapter 6 outlines an architecture of safety strategies and associated interven- 
tions that can be used both to manage safety on a day-to-day basis and to improve 
safety over the long term. The strategies are, we believe, applicable at all levels of 
the healthcare system from the frontline to regulation and governance of the system. 
As we have mentioned, most safety improvement strategies aim to optimise care. 
Within this general approach, we distinguish focal safety programmes aimed at spe- 
cific harms or specific clinical processes and more general attempts to improve 
work systems and processes. We suggest that these strategies need be complemented 
by strategies that are more concerned with detecting and responding to risk and 
which assume, particularly in a time of rising demand and financial austerity, that 
care will often be delivered in difficult working conditions. These three additional 
approaches are: risk control; monitoring, adaptation and response; and mitigation. 
Clinicians, managers and others take action every day to manage risk but curiously 
this is not generally seen as patient safety. We need to find a vision that brings all 
the potential ways of managing risk and safety into one broad frame. Optimisation 
strategies improve efficiency and other aspects of quality as much as they improve 
safety. In contrast, risk control, adaptation and recovery strategies are most con- 
cerned with improving safety. 

In Chaps. 7, 8, and 9 we explore the use and value of this strategic framework and 
consider how safety should be addressed in hospitals, home and in primary care, 
paying particular attention to safety in the home. We have found it difficult to make 
hospitals safe, even with a highly trained and professional workforce within a rela- 
tively strong regulatory framework. We will shortly be trying to achieve similar 
standards of safety with a largely untrained workforce (patients and their carers) in 
settings not designed for healthcare and with almost no effective oversight or super- 
vision. This may prove challenging. 

We believe that an expanded vision of patient safety is needed now. However in 
Chap. 10 we argue that the forthcoming changes in the nature, delivery and organ- 
isational forms of healthcare make the transition even more urgent. The healthcare 
of the future, with much more care being delivered in the home under the patient’s 
direct control, will require a new vision of patient safety necessarily focused on 
patients and their environment more than on professionals and the hospital environ- 
ment. Discussions of new technologies and the potential for care being delivered in 
a patient’s home are generally marked by unbridled optimism without any consider- 
ation of new risks that will emerge or the potential burden on patients, family and 
carers as they take on increasing responsibilities. The new scenario will bring great 
benefits, but also new risks which will be particularly prominent during the transi- 
tional period. For an active patient with a single chronic illness, empowerment and 
control of one’s treatment may be an unalloyed benefit, provided professionals are 
available when required. When one is older, frail or vulnerable, the calculation of 
risk and benefit may look very different. 

In the final two chapters, we draw all the material together and present a compen- 
dium of all the safety strategies and interventions discussed in this book. We describe 
this as an ‘incomplete taxonomy’ as we are conscious that, if this approach is 
accepted, there is much to be done to map the landscape of strategies and 
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interventions. These interventions can be selected, combined and customised to 
context. We hope that this framework will support frontline leaders, organisations, 
regulators and government in devising an effective overall strategy for managing 
safety in the face of austerity and rising demand. In the final chapter, we set out 
some immediate directions and implications for patients, clinical staff and manag- 
ers, executives and boards, and those concerned with regulation and policy. Financial 
pressures and rising demand can often distract organisations from safety and quality 
improvement which can temporarily become secondary issues. In contrast, we 
believe that financial pressures provoke new crises in safety and that we urgently 
need an integrated approach to the management of risk. 

We know that these ideas need to be tested in practice and that ultimately the test 
is whether this approach will lead in a useful direction for patients. We believe very 
strongly that the proposals we are making can only become effective if a community 
of people join together to develop the ideas and implications. 


Oxford, UK Charles Vincent 
Paris, France René Amalberti 


We gained great encouragement from the initial responses to an earlier draft of the 
book. We also received a host of ideas, suggestions and insightful comments which 
illuminated specific issues or identified flaws, infelicities and things that were just 
plain wrong. Where we have included specific quotes or examples provided by indi- 
viduals we have cited them in the text, but all the comments we received were valu- 
able and led to important changes to both the structure and the content of the book. 
The book you see today is very different from the draft originally circulated. We 
would like to thank the following people for their insights, suggestions and construc- 
tive criticism: Jill Bailey, Nick Barber, Maureen Bisognano, Jane Carthey, Bryony 
Dean Franklin, John Green, Frances Healey, Goran Henriks, Ammara Hughes, Matt 
Inada Kim, Jean Luc Harousseau, John Illingworth, Martin Marshall, Phillipe 
Michel, Wendy Nicklin, Penny Pereira, Anthony Staines and Suzette Woodward. 
The Health Foundation is remarkable in encouraging the development of new 
ideas and giving people the freedom and time to attack challenging problems. We 
thank the Health Foundation for their enthusiasm and support for this book. Charles 
would in particular like to thank Jennifer Dixon, Nick Barber, Jo Bibby, Helen Crisp 
and Penny Pereira for enabling a career transition and for their personal support and 
encouragement over many years. Michael Howes brought life and colour to our 
tentative figures. We thank Nathalie Huilleret at Springer for her enthusiasm for the 
project, her personal oversight of publication and her willingness and encourage- 
ment to make this book Open Access and available to all. 
Charles Vincent 
René Amalberti 
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Twenty-five years ago the field of patient safety, apart from a number of early pio- 
neers, did not exist and the lack of research and attention to medical accidents could 
reasonably be described as negligent (Vincent 1989). There is now widespread 
acceptance and awareness of the problem of medical harm and, in the last decade, 
considerable efforts have been made to improve the safety of healthcare. Progress 
has however been slower than originally anticipated and the earlier optimism has 
been replaced by a more realistic longer-term perspective. There has undoubtedly 
been substantial progress but we believe that future progress, particularly in the 
wider healthcare system, will require a broader vision of patient safety. In this chap- 
ter we briefly review progress on patient safety and consider the principal future 
challenges as we see them. 


Progress on Patient Safety 


With the massive attention now given to patient safety it is easy to forget how dif- 
ficult it was in earlier years to even find clear accounts of patient harm, never mind 
describe and analyse them. Medico-legal files, oriented to blame and compensation 
rather than safety, were the principal source of information (Lee and Domino 2002). 
In contrast narrative case histories and accompanying analyses and commentary are 
now widely available. Analyses of incidents are now routinely performed, albeit 
often in a framework of accountability rather than in the spirit of reflection and 
learning. 

Major progress has been made in assessing the nature and scale of harm in many 
countries. The findings of the major record review studies are widely accepted 
(de Vries et al. 2008) and numerous other studies have catalogued the nature and 
extent of surgical adverse events, infection, adverse drug events and other safety 
issues. The measurement and monitoring of safety continues to be a challenge but 
progress has been made in developing reliable indicators of safety status (Vincent 
et al. 2013, 2014). 
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2 1 Progress and Challenges for Patient Safety 


Analyses of safety incidents have revealed a wide range of contributory factors 
and that individual staff are often the inheritors of wider system problems (Reason 
1997). However, some safety problems can be linked to the sub-standard perfor- 
mance of individuals, whether wilful or due to sickness or incapacity (Francis 
2012). Regulation of both organisations and individuals is increasing and every 
healthcare professional now has a clear duty to report consistent poor performance 
from a colleague. Drawing attention to safety issues is actively encouraged at the 
highest levels, although many whistle-blowers are still shabbily treated and perse- 
cuted for their efforts. All of these developments represent an increasing concern 
with safety and determination to improve basic standards. 

Substantial progress has also been made in mapping and understanding safety 
issues. Surgery, for instance, was long ago identified as the source of a high propor- 
tion of preventable adverse events. A decade ago most of these would have been 
considered unavoidable or ascribed, generally incorrectly, as due to poor individual 
practice (Calland et al. 2002; Vincent et al. 2004). Studies of process failures, com- 
munication, teamwork, interruptions and distractions have now identified multiple 
vulnerabilities in surgical care. Given the inherent unreliability of the system it now 
seems remarkable that there are so few adverse events, which is probably testament 
to the resilience and powers of recovery of clinical staff (Wears et al. 2015). Many 
surgical units are now moving beyond the undoubted gains of checklists to consider 
the wider surgical system and the need for a more sophisticated understanding of 
surgical teamwork in both the operating theatre and the wider healthcare system 
(de Vries et al. 2010). 

A considerable number of interventions of different kinds have shown that errors 
can be reduced and processes made more reliable. Interventions such as computer 
order entry, standardisation and simplification of processes and systematic hando- 
ver have all been shown to improve reliability, and in some cases reduce harm, in 
specific contexts. We have however relatively few examples of large scale interven- 
tions which have made a demonstrable impact on patient safety, the two most nota- 
ble exceptions being the reduction of central line infections in Michigan and the 
introduction of the WHO surgical safety checklist (Pronovost et al. 2006; Haynes 
et al. 2009) (Table 1.1). 

While specific interventions have been shown to be effective it has proved 
much more difficult to improve safety across organisations. The United Kingdom 
Safer Patients Initiative, which engaged some of the acknowledged leaders in the 
field, was one of the largest and most carefully studied intervention programmes. 
The programme was successful in many respects, in that it engaged and energised 
staff and produced pockets of sustained improvement. However it failed to dem- 
onstrate large scale change on a variety of measures of culture, process and out- 
comes (Benning et al. 2011). Similarly, where studies have attempted to assess 
safety across a whole healthcare system, the findings have generally been disap- 
pointing. Longitudinal record review studies in the United States, France have 
shown no improvement in patient safety although there have recently been encour- 
aging results from Netherlands (Landrigan et al. 2010; Michel et al. 2011; Baines 
et al. 2015) 
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Table 1.1 Progress in patient safety over two decades 


Where we were (1995) Where we are now (2015) 
Foundations Incident reporting, continuous Largely unchanged. More 

improvement and development of translation and use of industrial 

best practice approaches to safety, increased 


attention to incident analysis, 
learning and feedback 


Definition Harm defined from a professional Patient safety still linked to a 
standpoint, rooted in a medico-legal | medico-legal perspective. Broader 
and insurance perspective. Narrow understanding of human error and 


vision of causality, direct association | organisational influences 
between technical care and harm 


Perimeter of Dominant technical vision of care, Recognition of the importance of 
inclusion improved clinical protocols as main | human factors and human sciences. 
priority for improving safety Organisational factors and safety 
culture are additional priorities for 
safety 
Measurement Counting incidents and adverse Largely unchanged 
events 


Compared to a decade ago, we now have a good understanding of the phenom- 
enology of error and harm, a considerable amount of epidemiological data, some 
understanding of the causes of harm, demonstrations of the efficacy of certain inter- 
ventions and the effectiveness of a few. We do not have clear evidence of wide 
sustained change or widespread improvements in the safety of healthcare systems. 
All in all, progress looks reasonable if not spectacular. Given the level of resources 
allocated to safety, still tiny in comparison with biomedicine, progress looks reason- 
ably good. 

We believe that the concept of patient safety we are working with is too narrow 
and that future progress, particularly outside hospitals, will require a broader vision. 
In the remainder of this chapter we set out some challenges and confusions that we 
regard as particularly critical. These provide both the motivation for our work 
together and also an introduction to our approach. 


Harm Has Been Defined Too Narrowly 


We agree with those who seek to provide a more positive vision of safety (Hollnagel 
2014). The punitive approach sometimes taken by governments, regulators and the 
media is, for the most part, deeply unfair and damaging. Healthcare while enor- 
mously beneficial is, like many other important industries, also inherently hazard- 
ous. Treating patients safely as well as effectively should be regarded as an 
achievement and celebrated. 

We make no apologies however for continuing to focus on harm as the touch- 
stone for patient safety and the motivation for our work. We will put up with errors 
and problems in our care, to some extent at least, as long as we do not come to harm 
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and the overall benefits clearly outweigh any problems we may encounter. Many 
errors do not lead to harm and may even be necessary to the learning and mainte- 
nance of safety. Surgeons, for example, may make several minor errors during a 
procedure, none of which really compromise the patient’s safety or the final out- 
come of the operation. 

Patient safety, particularly the large scale studies of adverse events, has its ori- 
gins in a medico-legal concept of harm. We have, for the most part, now separated 
the concept of harm from that of negligence which is an important achievement, 
though we still tend to think of safety as being the absence of specific harmful or 
potential harmful events (Runciman et al. 2009). Harm can also result from loss of 
opportunity due to a combination of poor care and poor coordination whether 
inside the hospital, at the transition with primary care, or over a long period of 
time in the community. Evidence is growing that many patients suffer harm, in the 
sense that their disease progresses untreated, through diagnostic error and delay 
(Graber 2013; Singh et al. 2014). In some contexts, this would simply be seen as 
poor quality care falling below the accepted standard. But for the patient a serious 
failure can lead to untreated or unrecognised disease and, from their perspective, 
to harm. 


Box 1.1 Safety Words and Concepts 
The term ‘medical error’ has been used in a variety of ways, often as short- 
hand for a poor outcome. We use the term error is in its everyday sense as a 
retrospective judgement that an action or omission by a person did not achieve 
the intended outcome. We use the term reliability when considering processes 
and systems rather than the actions of people. 

The aims of the patient safety movement can be stated in a number of dif- 
ferent ways: 


e To reduce harm to patients, both physical and psychological 
e To eliminate preventable harm 

e To reduce medical error 

e To improve reliability 

e To achieve a safe system 


All these are reasonable objectives but they are subtly different. We sug- 
gest that the central aim must be to prevent or at least reduce harm to patients, 
while acknowledging that the concept of harm is difficult to define and other 
objectives are also valid. As the book develops we will suggest that the most 
productive way to approach patient safety is to view it as the management of 
risk over time in order to maximise benefit and minimise harm to patients in 
the healthcare system. 
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We believe that the current focus on specific incidents and events is too narrow 
and that we need to think about harm much more broadly and within the overall 
context of the benefits of treatment. As the book evolves, we endeavour to develop 
a different vision which is more rooted in the experience of patients. As patients, the 
critical question for us is to weigh up the potential benefits against the potential 
harms which may, or may not, be preventable. While we certainly want to avoid 
harmful incidents, we are ultimately concerned with the longer term balance of 
benefit and harm that accrues over months or years or even over a lifetime. 


Safety Is a Moving Target 


Safety is, in a number of respects, a constantly moving target. As standards improve 
and concern for safety grows within a system, a larger number of events will come 
to be considered as safety issues. In a very real sense innovation and improving 
standards create new forms of harm in that there are new ways the healthcare system 
can fail patients. 

In the 1950s many complications of healthcare were recognised, at least by 
some, but largely viewed as the inevitable consequences of medical intervention 
(Sharpe and Faden 1998). Gradually, certain types of incidents have come to seem 
both unacceptable and potentially preventable. The clearest example in recent times 
is healthcare-associated infection, which is no longer viewed as an unfortunate side 
effect of healthcare. With increased understanding of underlying processes, mecha- 
nisms of transmission and methods of prevention, coupled with major public and 
regulatory pressure, such infections are becoming unacceptable to both patients and 
professionals (Vincent and Amalberti 2015). 

In the last 10 years, as more types of harm have come to be regarded as prevent- 
able, the perimeter of patient safety has expanded. A larger number of harmful 
events are now regarded as ‘unacceptable’. In addition to infections we could now 
include, in the British NHS, pressure ulcers, falls, venous thromboembolism and 
catheter associated urinary tract infections. In the United Kingdom the Francis 
Report into Mid Staffordshire Hospitals NHS Trust highlighted additional risks to 
patients, such as malnutrition, dehydration and delirium all of which are now being 
viewed as safety issues. We should also consider adverse drug reactions in the com- 
munity that cause admission to hospital, polypharmacy and general harm from over- 
treatment. All these, in the past, might have been regretted but are now receiving 
greater attention through being viewed under the safety umbrella. 

The perimeter of safety is therefore expanding but this does not mean that health- 
care is becoming less safe. A long-standing concern with safety in such specialties 
as anaesthesia and obstetrics is actually a marker of the high standards these special- 
ties have achieved. Safety is an aspiration to better care and labelling an issue as a 
safety issue is a strongly motivational, sometimes emotional, plea that such out- 
comes cannot and should not be tolerated (Vincent and Amalberti 2015). 
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Only Part of the Healthcare System Has Been Addressed 


Patient safety has evolved and developed in the context of hospital care. The under- 
standing we have of the epidemiology of error and harm, the causes and contribu- 
tory factors and the potential solutions are almost entirely hospital based. The 
concepts which guided the study of safety in hospitals remain relevant in primary 
and community care but new taxonomies and new approaches may be required in 
these more distributed forms of healthcare delivery (Brami and Amalberti 2010; 
Amalberti and Brami 2012). 

Care provided in a person’s home is an important context for healthcare delivery 
but patient safety in the home has not been addressed in a systematic manner. The 
home environment may pose substantial risks to patients, greater in some cases than 
in the hospital environment. Safety in the context of a patient’s home care is likely 
to require different concepts, approaches and solutions to those developed in the 
hospital setting. This is because of the different environment, roles, responsibilities, 
standards, supervision and regulatory context in home care. Critical differences are 
that patients and carers are autonomous and are increasingly taking on professional 
roles; they rather than the professional become the potential source of medical error. 
Additionally, stressful and potentially hazardous conditions, such as poor lighting, 
mean that socio-economic conditions take on a much greater importance. 

In both primary care and care at home the risks to patients are rather different 
from those in hospital, being much more concerned with omissions of care, failure 
to monitor over long time periods and lack of access to care. These areas have not 
traditionally fallen within the area of patient safety but are undoubtedly sources of 
potential harm to patients. The concept of the patient safety incident, and even of 
adverse events, breaks down in these settings or is at least stretched to its limit. 
Suppose, to take just one example, a patient is hospitalised after taking an incorrect 
dose of warfarin for 4 months. The admission to hospital could be viewed as an 
incident or a preventable adverse event. This description however hardly does jus- 
tice to 4 months of increasing debility and ill health culminating in a hospital admis- 
sion. In reality, the admission to hospital is the beginning of the recovery process 
and a sign that the healthcare system is at last meeting the needs of this patient. The 
episode needs to be seen not as an isolated incident but as an evolving and pro- 
longed failure in the care provided to this person. 


We Are Approaching Safety in the Same Way in All Settings 


‘But we are not like aviation’ someone will inevitably say in any discussion of the 
value of learning from commercial aviation and comparing approaches to safety in 
different sectors. Well no, healthcare is not like aviation in any simple sense. But 
some aspects of healthcare are comparable to some aspects of aviation. An surgical 
operation does not have a great deal in common with a commercial flight but the 
pre-flight checking process is comparable to the pre-operation checking process and 
so learning how aviation manages those checks is instructive. 
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The objection to the simple comparison is important. Safety in healthcare does 
need to be approached differently from safety in commercial aviation. The whole- 
sale transfer of aviation approaches to healthcare at the very least requires consider- 
able adaptation; crew resource management acted as an inspiration to surgical and 
anaesthetics teams but surgical team training has now developed its own style and 
history (Gaba 2000; Sevdalis et al. 2009). We now need to go further and consider 
a still more important issue which is that safety may need to be approached differ- 
ently in different areas of healthcare. Specialty specific approaches (Croskerry et al. 
2009) are emerging but models, methods and interventions do not often distinguish 
between settings. 

Healthcare is a particularly complex environment. We might say that healthcare 
is 20 different industries under one banner. Consider the hospital environment with 
multiple types of work, many different professions and varying working conditions 
across clinical environments. There are areas of highly standardized care such as 
pharmacy, radiotherapy, nuclear medicine and much of the process of blood transfu- 
sion. All of these are highly standardized and rely heavily on automation and infor- 
mation technology. They are islands of reliability within the much more chaotic 
wider hospital environment. On the ward standards and protocols provide important 
controls on hazards (such as infection from poor hand hygiene) but day-to-day con- 
ditions demand constant adaptation and flexibility. Other sections of the hospital, 
such as the emergency department, continually have to deal with unpredictable 
patients flow and workloads; their activity needs considerable hour-by-hour adapta- 
tion because of the huge variety of patients, the complexity of their conditions and 
the vulnerabilities of the healthcare system. 

The risks and the nature of the work vary across all these settings. In spite of this 
we are essentially using the same concepts, the same analytic toolbox and the same 
suite of interventions in all settings. Many of these approaches can be customised 
and adapted to different settings. However we will argue later in the book that risk 
needs to be managed in very different ways in different environments and that the 
approach of, for instance, commercial aviation is very different from that of profes- 
sionals working in more fluid risky environments such as fire-fighters. In healthcare 
we may have to adapt our approach to safety according to the nature of the work, the 
working conditions and use a variety of underlying models of safety. 


Our Model of Intervention Is Limited 


The most dramatic safety improvements so far demonstrated have been those with 
a strong focus on a core clinical issue and a relatively narrow timescale. These inter- 
ventions, such as the surgical safety checklist and the control of central line infec- 
tions, are of course far from simple in the sense that they have only succeeded 
because of a sophisticated approach to clinical engagement and implementation. 
More general system improvements may extend to an entire patient pathway. For 
instance the introduction of the SURPASS system using checklists and other 
improvements to communication along the entire surgical pathway and showed a 
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reduction in surgery complications (de Vries et al. 2010). Bar coding and other 
systems have massively enhanced the reliability of blood transfusion systems, 
incrementally improving each step of the pathway (Murphy et al. 2013). 

We should however be wary of modelling all future safety interventions on our 
most visible successes. At the moment the primary focus is on developing interven- 
tions to address specific harms or to improve reliability at specific points in a care 
process. This, entirely reasonable, approach is evolving to include the reliability of 
entire care pathways or areas of care (such as an out-patient clinic). We will argue 
however that, in addition to increasing reliability, we also need to develop proactive 
strategies to manage risk on an ongoing basis, particularly in less controlled envi- 
ronments. There is also a class of strategies and interventions, particularly those that 
focus on detecting and responding to deviations, that are particularly critical for 
preventing harm to patients. These approaches do not feature as strongly in the clas- 
sical quality and safety armament. 

We also need to recognise that safety, for any person or organisation, is always 
only one of a number of objectives. For instance, many sports involve an element 
of risk and potential harm. When we become patients we necessarily accept the 
risks of healthcare in pursuit of other benefits. Similarly a healthcare organisation 
can never treat safety as the sole objective, even if they say safety is their ‘top pri- 
ority’. Of necessity, safety is always only one consideration in a broader endeav- 
our, whether in healthcare or in any other field. As an oil executive expressed it: 
‘Safety is not our top priority. Getting oil out of the ground is our priority. However, 
when safety and productivity conflict, then safety takes precedence’ (Vincent 
2010). Similarly, in healthcare, the main objective is providing healthcare to large 
numbers of people at a reasonable cost, but this needs to be done as safely as 
possible. 


Healthcare Is Changing 


We have argued that, for a variety of reasons, we need to expand our view of patient 
safety. This argument has been made from our understanding of current healthcare 
systems. However we also believe that the rapid evolution of healthcare, combined 
with increasing financial pressures, brings an additional urgency to the quest for a 
new vision. 

Outcomes of care have improved rapidly all over the world. People now survive 
illnesses, such as myocardial infarction and stroke, which were once fatal. As the 
effectiveness of healthcare improves, increasing numbers of patients are ageing 
with their illness under control. Current projections suggest that by 2030 as many as 
25 % of the population in many countries may surviving into their 90s. In many 
cases an illness which was once fatal has become a chronic condition with all the 
related implications for the individual, society and the healthcare system. The treat- 
ment of chronic conditions (such as diabetes, respiratory diseases, depression, car- 
diac and renal disease) is now the major priority. The phenomenal increase in 
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diabetes alone (although not driven by ageing per se) threatens to destabilise health- 
care systems and the general increase in multiple comorbidities and more complex 
health problems places huge stress on healthcare systems. The question of what 
‘best practice’ actually is for any individual patient is itself becoming a very diffi- 
cult issue. 

The impact on global cost of healthcare is considerable, with average costs 
increasing by | % of national gross domestic product (GDP) between 2000 and 
2013 (World Bank). By 2030 there may be 30 % more patients with chronic condi- 
tions which might require a further increase in funding of between 2 and 4 % of 
GDP, depending on the approach taken by the country in question. There is a major 
risk that by 2030, institutional care for the aged will be unaffordable and that, in the 
absence of alternatives, there will be a crisis of quality in care for the aged. While 
alternative systems are evolving there could be if anything an increased risk of fail- 
ures and harm to patients. 

The need for healthcare to evolve and adapt is to a very large extent the conse- 
quence of the successes of modern medicine. The focus of care needs to move rap- 
idly from high quality care in hospitals to a focus on the entire patient journey over 
years or even over a lifetime. These changes are long overdue but becoming increas- 
ingly urgent. The shift to the management of care over long time periods and many 
settings has a number of consequences with implications for safety. Patients stay in 
hospital less time, live at home for years with their disease, with a consequent trans- 
fer of responsibility from hospitals to primary care. This requires effective coordi- 
nation across all health care organisations, in particular at the transition points, in 
order to mitigate risk and enable positive outcomes. Reducing complexity is 
crucial. 

Finally, patients are more knowledgeable and informed than previously. They are 
increasingly aware of their rights to information and access. The public expects a 
system that meets their needs in a holistic and integrated way, with a seamless sys- 
tem of effective communication between transition points. Last but not least there is 
an increasing emphasis on the prevention of disease and the maintenance of health. 
This turns the concept of the patient journey into the concept of the citizen or person 
journey. 

The combination of austerity, rising healthcare costs, rising standards and 
increased demand will place huge pressures on healthcare systems which will 
increase the likelihood of serious breakdowns in care. At the same time innovations 
in the delivery of care in the home and community, while providing new benefits, 
will also create new forms of risk. Our current models of safety are not well adapted 
to this new landscape. 

In this chapter we identified a number of challenges for patient safety. In the next 
three chapters we begin to consider how these challenges are to be met and establish 
the foundations for the more practical and strategic chapters that follow later in the 
book. First however we build the foundations beginning with the simple idea that 
care given to patients is of varying standard and, equally important, that the care 
given to any one patient varies considerably along their journey. 
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Key Points 

e Major progress has been made in assessing the nature and scale of harm to 
patients in many countries 

e A considerable number of interventions of different kinds have shown that 
errors can be reduced and processes made more reliable. 

e The most safety improvements so far demonstrated have been those with a 
strong focus on a core clinical issue and a relatively narrow timescale. It has 
proved very much more difficult to improve safety across whole organisations 

e Improving safety at a population level has been even more challenging and 
findings have generally been disappointing. 

e Safety is, in a number of respects, a constantly moving target. The perim- 
eter has expanded over time as new forms of harm have been identified as 
safety issues. 

e Patient safety has evolved and developed in the context of hospital care. 
The concepts which guided the study of safety in hospitals remain relevant 
in primary and community care but new approaches to safety will be 
required in these more distributed forms of healthcare delivery 

e The successes of healthcare and improved living conditions mean that 
people live longer with chronic conditions which were once fatal. This has 
led to considerable transfer of responsibility from hospitals to home and 
primary care. Safety models, safety methods, and interventions strategies 
must change accordingly. 

e The combination of austerity, rising healthcare costs, rising standards and 
increased demand will place huge pressures on healthcare systems which 
will increase the likelihood of serious breakdowns in care. Innovations in 
the delivery of care in the home and community, while providing new ben- 
efits, will also create new forms of risk. Our current models of safety are 
not well adapted to this new landscape. 
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In this chapter we first attempt to persuade (or remind) the reader that much health- 
care departs from the care envisaged by standards and guidelines. We appreciate 
that standards and guidelines need considerable interpretation and adaptation for 
patients with multiple conditions (Tinetti et al. 2004) and that even the simplest 
conditions require consideration of personal preferences and other factors. However 
we are concerned primarily with the basic fact that the care provided to patients 
often does not reach the standard that professionals intend to deliver and which 
professional consensus would regard as reasonable and achievable. Clinical pro- 
cesses and systems are often unreliable and in fact many patients are harmed by the 
healthcare intended to help them. All this is to some degree obvious to anyone who 
works at the frontline or studies healthcare deeply. One of the questions we address 
in this book is how to manage the gap between the ‘real and the ideal’ and how best 
to manage the risks to patients. 

Many factors conspire to make optimal care both difficult to define and difficult 
to achieve (Box 2.1). The vulnerabilities of the system, personal attitudes, team 
dynamics and a variety of external pressures and restraints combine to produce a 
‘migration’ away from best practice. This in turn means that clinical staff are 
engaged in constant adaptation, detecting problems and responding to them. Safety 
is in a very real sense achieved by frontline practitioners rather than imposed by 
standards. We will develop this further in later chapters to argue that safety strate- 
gies to manage these risks need to foster these adaptive capacities both at an indi- 
vidual and organisational level. 
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Box 2.1 Observation of Patients at Risk of Suicide: When Working Conditions 

Make It Difficult to Follow Procedures 

Over a 1 year period there were on average 18 suicides by in-patients under 

observation per year in hospitals in the United Kingdom. Ninety-one percent of 

deaths occurred when patients were under level 2 (intermittent) observation. 
Deaths under observation tended to occur when policies or procedures 

(including times between observations) were not followed, for example: 


e When staff are distracted by other events on the ward 
e At busy periods, such as between 7.00 and 9.00 

e When there are staff shortages 

e When ward design impedes observation. 


National Confidential Inquiry into Suicide and Homicide by People with 
Mental Illness (2015) 


The Day-to-Day Realities of Healthcare 


When we are working we are usually preoccupied with the task in hand and do not 
have the attentional capacity to simultaneously reflect on the working environment 
or remember all the difficulties encountered during the day. Furthermore, we are not 
easily able to aggregate our experience over long time periods. For instance, a doc- 
tor may know that notes are often missing in the clinic but will struggle to estimate 
how often this happens over a year. In addition it is very difficult for individuals to 
gain a true understanding of the failures and vulnerabilities across an entire techni- 
cal area. Patients and families have a privileged view in that they alone follow the 
full story of care but our view as patients is obviously partial in that we cannot know 
the wider workings of the hospital or clinic. All these factors combine to make it 
difficult for any individual to monitor or assess the overall standard of care. There is 
however ample evidence to support the simple idea that care often falls below the 
standard expected. Let us consider some examples. 


Comparing Actual Care with the Care Intended by Guidelines 


Major studies in both the United States and Australia suggest that patients typically 
receive only a proportion of the care indicated by guidelines. Studies in the United 
States suggest that many patients received only about half of recommended care, 
though other patients receive investigations and treatment that are unnecessary 
(McGlynn et al. 2003). In a major recent Australian study adult patients received only 
57 % of recommended care with compliance ranging from 13 % for alcohol depen- 
dence to 90 % for coronary artery disease (Runciman et al. 2012). These studies did not 
assess the direct impact on the patients concerned, but other studies have linked failures 
in the care provided with subsequent harm. For instance Taylor and colleagues (2008) 
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interviewed 228 patients during and after their treatment and found 183 service quality 
deficiencies, each of which more than doubled the risk of any adverse event or close 
call for that patient. Service quality deficiencies involving poor coordination of care 
were particularly associated with the occurrence of adverse events and medical errors. 
In another example physicians reviewed 1566 case notes from 20 English Hospitals 
writing judgment-based comments on the phases of care provided and on care overall. 
About a fifth of the patients were considered to have received less than satisfactory 
care, often experiencing a series of adverse events (Hutchinson et al. 2013). 


Reliability of Clinical Systems in the British NHS 


Some healthcare processes, such as the administration of radiotherapy, achieve very 
high levels of reliability. Other processes are haphazard to say the least. Burnett and 
colleagues (2012) examined the reliability of four clinical systems in the NHS: clin- 
ical information in surgical outpatient clinics, prescribing for hospital inpatients, 
equipment in theatres, and insertion of peripheral intravenous lines. Reliability was 
defined as 100 % fault free operation when, for example, every patient had the 
required information available at the time of their appointment. 

Reliability was found to be between 81 and 87 % for the systems studied, with 
significant variation between organisations for some systems; the clinical systems 
therefore failed on 13—19 % of occasions. This implies, if these findings are typical, 
that in an English hospital: doctors are coping with missing clinical information in 
three of every 20 outpatient appointments and there is missing or faulty equipment 
in one of seven operations performed. In each case where measured, about 20 % of 
reliability failures were associated with a potential risk of harm. On this basis it is 
hardly surprising that patient safety is routinely compromised in NHS hospitals and 
that clinical staff come to accept poor reliability as part of everyday life. 


Following the Rules: Reliability of Human Behaviour 


Delivering safe, high quality care is an interplay between disciplined, regulated behav- 
iour and necessary adaptation and flexibility. Rules and procedures are never a com- 
plete solution to safety and sometimes it is necessary to depart from standard procedures 
in the pursuit of safety. However, protocols for routine tasks are standardised and speci- 
fied precisely because those tasks are essential to safe, high quality care. 

Protocols of this kind are equivalent to the safety rules of other industries — 
defined ways of behaving when carrying out safety-critical tasks (Hale and Swuste 
1998). Examples in healthcare include: checking equipment, washing your hands, 
not prescribing dangerous drugs when you are not authorised to, following the pro- 
cedures when giving intravenous drugs and routinely checking the identity of a 
patient. Such standard routines and procedures are the bedrock of a safe organisa- 
tion, but there is ample evidence that such rules are routinely ignored: 


e Hand washing. Contamination through hand contact is a major source and hand 
hygiene a major weapon in the fight against infection (Burke 2003). Studies have 
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found that average levels of compliance, before major campaigns were insti- 
tuted, have varied from 16 to 81 % (Pittet et al. 2004). 

e Intravenous drug administration. Studies have found that over half involve an error, 
either in the preparation of the drug or its administration. Typical errors were pre- 
paring the wrong dose or selecting the wrong solvent (Taxis and Barber 2003). 

e Prophylaxis against infection and embolism. Only 55 % of surgical patients 
receive antimicrobial prophylaxis (Bratzler et al. 2005) and only 58 % of those at 
risk of venous thromboembolism receive the recommended preventive treatment 
(Cohen et al. 2008). 


The causes of departure from standards are many. In some settings the working 
environment is reasonably calm and orderly so staff are able to follow clear proto- 
cols and abide by core standards. In other settings however the pressures are great, 
the environment noisy and chaotic and staff are essentially just trying to do the best 
they can in the circumstances. In any systems there are pressures for greater produc- 
tivity, less use of resources and occasions where missing or broken equipment 
forces adaptations and short cuts; add to this that we all, occasionally or frequently, 
are in a rush to get home, get on to the next case, tired or stressed and apt to cut 
corners. Standards may be unrealistic or too complex; staff may not be sufficiently 
skilled or have not received the necessary training. Working in such conditions is an 
everyday occurrence for many clinicians and acts as a constant reminder of the care 
they would like to give and the reality of the care they are able to provide. Over time 
however these departures from standards can become increasingly tolerated and 
eventually invisible (Box 2.2). 


Box 2.2 External Pressures and Gradual Migration to the Boundary of Safety 
Occasional lapses can become more tolerated over time and systems can 
become gradually more degraded and eventually dangerous. The phrase “ille- 
gal normal’ captures the day-to-day reality of many systems in which devia- 
tions from standard procedures (the illegal) are widespread but occasion no 
particular alarm (they become normal). The concept of routine violations is 
not part of the thinking of managers and regulators; in truth it is a very uncom- 
fortable realisation that much of the time systems, whether healthcare, trans- 
port or industry, operate in an “illegal-normal’ zone. The system continues in 
this state because the violations have considerable benefits, both for the indi- 
viduals concerned and for managers who may tolerate them, or even encour- 
age them, in the drive to meet productivity standards. 

Over time these violations can become more frequent and more severe so 
that the whole system ‘migrates’ to the boundaries of safety. Violations are 
now routine and so common as to be almost invisible to both workers and 
managers. The organisation has now become accustomed to operating at the 
margins of safety. At this stage, any further deviance may easily result in 
patient harm, and would generally be considered as negligent or reckless con- 
duct (Amalberti et al. 2006). 
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The Ideal and the Real: Five Levels of Care 


We now consider the implications of the gap between the care envisaged by stan- 
dards and guidelines and the care actually given to patients. We have found it useful 
to distinguish five levels of care each departing further from the ideal and, we sug- 
gest, increasing probability of harm as one moves down the levels. 


1. Level 1 corresponds to optimal care envisaged by standards (though truly opti- 
mal care can never be encapsulated in standards). These standards are set out by 
national and professional organisations and represent a consensus on what can 
be regarded as the optimum care achievable within current cost constraints. This 
level provides a shared ideal reference of excellent care, although it is seldom 
fully achieved across an entire patient journey. 

2. Level 2 represents a standard of care which experts would judge as both provid- 
ing a good outcome for the patient and also achievable in day to day practice. 
The care is of good standard and the outcome is good, even though there may be 
minor variations and problems. Any departures from best practice are relatively 
unimportant in the overall care provide to the patient. 

3. Level 3 represents the first level where the safety of the patient may be compro- 
mised. We consider, for reasons given above, that a considerable amount of the 
healthcare that patients receive falls broadly into this category. At this level there 
are frequent departures from best practice which occur for a wide variety of dif- 
ferent reasons and are a potential threat to patients. There may for example not 
be a timely monitoring of anticoagulation level after prescription of heparin. 
This level has been previously described as the ‘illegal normal’ (Amalberti et al. 
2006) (Box 2.2). 

4. Level 4 represents a departure from standards which is sufficient to produce 
avoidable harm. For example, a 68 year old patient undergoes a cholecystectomy 
and contracts a urinary catheter infection after surgery. Analysis of the event 
showed that the catheter was not checked regularly and was left in place too 
long. This was a clear departure from expected care. However treatment was 
rapidly instituted and the infection was under full control after 10 days. The 
patient suffered avoidable harm and had to stay in hospital an additional week 
but then recovered completely. 

5. Level 5 refers to care that is poor over a longer period and places the patient at 
risk of substantial and enduring harm. For instance if, in the case described 
above, the patient not only contracted the infection but it was then not recognised 
and not treated effectively. This would result in at best a very prolonged recovery 
and increased frailty but also a potentially fatal outcome. 


Broadly speaking we see Level 1 as optimal care, certainly a valuable aspiration 
and inspiration but very difficult to achieve in practice and in many settings not easy 
to define. Optimal care is relatively easy to specify in a highly standardised and struc- 
tured clinical setting but in many environments, particularly primary care, the care 
provided necessarily evolves and unfolds in a complex social context (Box 2.3). 
Level 2 is a more realistic level of care where there are minor imperfections but 
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clinical care is of a very good standard. Level 3 is a distinct deterioration with mul- 
tiple lapses of care but not sufficient to greatly affect long term outcome. Levels 4 
and 5 in contrast offer potential for harm, either through omission of critical aspects 
of care, serious errors or neglect. In the common understanding of these terms the 
ambitions of high quality care are associated with Levels | and 2, and those con- 
cerned with safety aiming to avoid levels 4 and 5. 


Box 2.3 Optimal Care Can Often Not Be Precisely Defined 

There are many clinical situations in which optimal care cannot be precisely 
defined. This may be because the disease is not well understood, is rare or 
expressed in an unusual manner. More commonly though the patient, often 
frail or elderly, is suffering from a number of different conditions presenting a 
complicated and changing picture. In these cases, common in primary care and 
mental health, clinical judgement and sensitive shared decisions are to the fore: 


I don’t believe that in much of what we do in healthcare, particularly in primary care, 
we can define what we mean by ‘excellence’, nor can we codify it though guidelines 
and standards. We can reduce health provision to its component parts and pretend 
that these reflect the whole but this ignores the inherent paradoxes of competing 
goods and trade-offs with other objectives. The thinking that dominates the safety 
world is sometimes too rational. What I see is lots of thoughtful clinicians who 
understand the discrepancy between the ideal and the real, for whom the tension is 
always on their agenda and who thoughtfully manage these tensions because they 
accept that they live in a world that wants to simplify (M Marshall, 2015, personal 
communication) 


Figure 2.1 is similar to many diagrams which represent variation in standards of 
care and which distinguish good, average and poor units or organisations. Certainly 
some organisations deliver poor care for sustained periods of time and even national 
services can have periods of high risk of harm at times of crisis. However we intend 
to capture a more fluid reality in which any patient is at risk of a sudden decline in 
standards, and at risk of harm, on many occasions during their healthcare journey. 
Safety can be eroded quite suddenly in any team or organisation, just as there is 
always some risk of accident with the safest car driven by the best driver on the saf- 
est road. We are therefore not only concerned with strategies which may support 
struggling teams or organisations but also with developing strategies and interven- 
tions to manage risk on a day-to-day basis. 


The Cumulative Impact of Poor Quality Care 


Patients can receive some treatment of poor quality, in the sense of haphazard and 
patchy adherence to accepted standards, and still not come to any harm. We suggest, 
however, harm is much more probable when healthcare moves further from best 
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Fig.2.1 Five levels of care 


practice (Levels 4 and 5). This is partly because obvious lapses in standards (such 
as not checking patient identity) may lead to immediate harm but the greater danger 
to patients probably comes from the cumulative impact of minor problems 
(Hutchinson et al. 2013). 

Suppose for example, a fit and well 26 year old patient has planned abdominal 
surgery for inflammatory bowel disease on a Wednesday. Due to a shortage of beds, 
the patient is placed on the orthopaedic ward, with nurses, pharmacists and other 
clinicians who are not used to looking after this type of problem. The operation is 
difficult and complex; a piece of bowel was removed and a new join made between 
the remaining ends of the bowel. On Saturday evening the patient has an episode of 
fever at 39 °C and abdominal pain, which could indicate that the new join is leaking. 
The young doctor on duty over the weekend is a locum, who does not know the 
patient. She tries to read the operation note but it is not completely legible. She does 
not appreciate the potential seriousness and does not seek more senior advice. Over 
the next 24 h the patient continues to deteriorate but the staff do not appreciate the 
significance of the symptoms. By Monday morning the patient is so unwell that he 
suffers a cardiac arrest and eventually dies on Monday evening after a futile return 
to the operating theatre during the day. 

This scenario describes a series of relatively ordinary and commonplace lapses, 
omissions and events which together have a catastrophic effect. Clearly there were 


20 2 The Ideal and the Real 


problems in assessment of symptoms, escalation, record keeping, communication, 
coordination of care and management of bed availability, possibly exacerbated by 
external pressures. None of the individual lapses and problems is out of the ordinary 
or particularly shocking — but they combine to create catastrophe. 

The impact of the cumulative effects of poor care suggests that we may need to 
widen the time frame of analyses of adverse events and poor outcomes. This will be 
especially important once we consider safety in the home and community and in the 
context of the overall impact of healthcare on a person’s life and well-being. However 
we may also see a much greater incidence of harm due to cumulative minor failure in 
the future owing to the number and complexity of transitions along the patient 
journey. 

Consideration of the cumulative effects of poor care also has implications for 
how we assess priorities for patient safety. Dramatic incidents, such as deaths 
from spinal injection of vincristine (Franklin et al. 2014), attract considerable 
attention and are tragic for the people involved but they tend to skew the direction 
of patient safety initiatives towards comparatively rare events. In surgery the cases 
that attract most attention are those with sudden, dramatic outcomes with fairly 
immediate causes. These are incidents such as operating on the wrong patient or 
retained foreign body which are rare but frequently disastrous when they do occur; 
they are low risk but ‘high dread’ in the language of the psychology of risk. 
However surgical patients run much greater risks from care that is simply of poor 
standard for whatever reason. There is for instance a huge variation in mortality 
from surgery across Europe. In a major recent review 46,539 patients were studied 
of whom 1855 (4 %) died before hospital discharge (Pearse et al. 2012). Crude 
mortality rates varied widely between countries range from 1.2 % for Iceland to 
21.5 % for Latvia. Substantial differences remained even after adjustment for 
confounding variables. This suggests that much of the care provided is, in our 
terms, of levels 3, 4 and 5 even by the standards of individual countries. Once we 
begin to see safety in these terms it is clear that the harm from poor management 
of post-operative complications dwarfs the much more prominent problem of sur- 
gical never events. 

We need therefore to reflect on the broader priorities from a population health 
perspective. This process has already begun with the increased attention given to 
programmes to reduce falls, pressure ulcers, acute kidney injury and infections of all 
kinds. The scope of patient safety needs to further expand to embrace consideration 
of poor care of all kinds and to integrate with those seeking to understand and reduce 
the sources of variability. We should also remember that most studies at the hospital 
level focus on one particular type of adverse event (such as hospital acquired infec- 
tion) or one service (such as surgery). Very few studies assess the whole spectrum of 
incidents afflicting patients or assess their cumulative impact over time. 
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Explicit Discussion of the Real Standard of Care Is Critical 


We now come to a central problem and challenge which is that the standard of 
usual care cannot easily be explicitly discussed. It is of course understood implic- 
itly within clinical teams and each new member is socialised into accepting the 
standards of care in that particular environment which may be either higher, or 
lower, than they are used to. When people join a unit, or spend time in another 
unit, there may be a sudden shock of recognition of a very different standard and 
tolerance for departures from standards. There is huge variation in different clini- 
cal teams in what they regard as good enough care which is influenced by the 
social norms and values of that particular setting. Care that is viewed as ordinary 
on one ward might be seen as being a major lapse in standards on another. Most 
clinicians are aware that much care is in the ‘illegal normal’ range and immedi- 
ately recognise this concept when it is presented. They know that the care they 
provide often falls short of the care they would like to provide but they are adept 
at navigating the healthcare system to provide the best care they can in the 
circumstances. 

Organisations however, and still more governments, cannot easily openly say 
that much care is at level 3 and routinely dips to levels 4 and 5. This has some 
important consequences for the management of risk. First, it becomes very difficult 
to study or to value the many adaptive ways in which staff cope in difficult environ- 
ment to prevent harm coming to patients. Second, and most important to our argu- 
ments, attempts to improve safety may not be targeting the right levels or the right 
behaviours. We will argue later that most safety interventions are essentially 
attempts to improve reliability and, ultimately, to move all care towards Level 1. 
This is an important and necessary strategy but, in our view, only applicable in some 
circumstances. This approach need to be supplemented by strategies that aim to 
maintain care at Level 3 and prevent decay into levels 4 and 5. We might express 
this by saying that in the day to day provision of care it is more urgent that our sys- 
tems prioritise achieving reliable basic standards than striving for unachievable ide- 
als. If care is generally at Level 3 then the principal aim might be to improve 
reliability and move to Level 2. If however care is often at level 4 or 5, that is frankly 
dangerous, then the detection and response to potential dangers might be a higher 
priority (Fig. 2.2). 

The aspirations to excellence are important and should not be mocked or derided 
as unrealistic. The problem is that the rhetoric of excellence masks the urgently 
needed discussion of the realities of ‘usual care’. If our aspiration becomes only to 
deliver ‘good enough’ care then there is a danger of increased variation, declining 
standards and increased hazard. The definition and aspiration of optimum quality 
remains critical — but so does an explicit discussion of the current reality. 
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What Is the Impact of Improving Quality Standards? 


Innovation and the aspiration to continually improve are at the heart of medicine. 
However the introduction of new treatments or new standards of care may place 
unrealistic demands on both staff and organisations. Stroke for example was at one 
time regarded as untreatable. Brain cells were thought to die within minutes after a 
stroke began, and medical treatment largely consisted of caring for the patient and 
“wait and see”. We have known for a decade now that treatment following a stroke, 
especially if begun within 3 h of onset, can preserve brain tissue. Guidelines typi- 
cally recommend a door-to-needle time of 60 min. However in 2011 only one third 
of American patients were treated within the guideline-recommended door-to- 
needle times (Fonarow et al. 2013). Many countries have instituted major pro- 
grammes to improve the efficiency of treatment for stroke which have led to great 
improvements in outcome. 
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Increased $ 3 
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Fig.2.2 Optimisation and risk management 
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We are not criticising the care given or the delays in bringing in new standards of 
delivery. Rather we are pointing to the inevitable increase in departures from guide- 
lines which result when a new standard is specified. Ten years ago there would have 
been few ‘incidents’ relating to failures in the early treatment of stroke because 
standards of care had not been introduced. We can now, because of improved care, 
point to numerous serious incidents because many patients cannot access to care 
within the 3 h of onset due to a failures in the healthcare system. As standards 
improve we are therefore likely to have an increasing number of incidents which are 
concerned with omissions of care. What counts as an ‘incident’ in 2015 may simply 
have been ordinary practice in 2005; this is a very common consideration in legal 
cases which are being decided some years after the initial event. The new standards, 
hugely beneficial for patients, create new kinds of incidents and safety problems 
(Vincent and Amalberti 2015). 


Levels of Care and Strategies for Safety Improvement 


Improving the standard of care delivered and the gradual setting of higher standards 
is of course a positive and necessary aspiration. However when doing this we need 
to recognise that we are redefining both quality and safety and increasing the pres- 
sure on individuals and organisations. Champions of the new standards will emerge 
and bring about change but many organisations will take time to meet the new stan- 
dard and weaker organisations may even be destabilised because of the increasing 
demand. 

We have at present very few strategies for managing the transitional period or for 
responding constructively to the inevitable gap between expected standards and 
organisational reality. During these transition periods we will need to do more than 
simply exhort and harass organisations to meet the new standards. We must also 
recognise the inevitable lag and employ strategies that emphasise the detection of 
problems, awareness of conditions which degrade safety and individual and enhance 
team based management of potentially harmful care. These arguments will be fully 
developed in Chap. 7. 
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Key Points 

e Many patients do not receive the care intended. We can do a great deal to 
increase reliability and achieve higher standards of care. However we 
believe that in healthcare there will always be a gap between the ideal and 
the real. 

e We distinguish five levels of care each departing further from the ideal and, 
we suggest, increasing probability of harm as one move down the levels. 
— Level 1 corresponds to the optimum care envisaged by standards. This 

level provides a shared reference of excellent care, although it is seldom 
fully achieved across an entire patient journey. 

— Level 2 represents a standard of care which experts would judge as both 
providing a good outcome for the patient and also achievable in day to 
day practice 

— Level 3 represents the first level in which the safety of the patient is 
threatened. At this level there are frequent departures from best practice 
which occur for a wide variety of different reasons. 

— Level 4 represents a departure from standards which is sufficient to pro- 
duce avoidable harm but not sufficient to substantially affect the overall 
outcome. 

— Level 5 refers to care that is poor over a longer period and places the 
patient at risk of substantial and enduring harm. 

e We suggest that organisations and government find it difficult to openly 
discuss the daily threats and variations in standards of care. This has 
important consequences. First, it becomes very difficult to study or value 
the many ways staff adapt to prevent harm coming to patients. Second, 
attempts to improve safety may not be targeting the right levels or the right 
behaviours. 

e The aspirations to excellence are important and should not be derided as 
unrealistic. The problem is that the rhetoric of excellence masks the 
urgently needed explicit discussion of the realities of usual care which is a 
critical first step in the effective management of risk. 

e We propose that most safety interventions are essentially attempts to 
improve reliability. This is an important and necessary approach but needs 
to be complemented by additional strategies that aim to manage risk and 
protect patients from serious failures in care. 
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In the previous chapter we set out five levels of care with the levels being defined 
according to how closely they met expected standards of care. We argued that the 
care delivered to patients frequently departs from expected standards and that this 
has important implications for the management of safety. Most safety improvement 
strategies aim to improve the reliability of care and move more closely to optimal 
care. We suggest that these strategies need be complemented by strategies that are 
more concerned with detecting and responding to risk and which assume that care 
will often be delivered in difficult working conditions. 

This argument could be seen simply as an admission of defeat. We might 
appear to be saying that healthcare will never achieve the safety standards of com- 
mercial aviation and we must accept this and manage the imperfections as best we 
can. Errors will inevitably occur, patients will sometimes be harmed and the best 
we can hope for is to respond quickly and minimize the damage. We would accept 
that working conditions and levels of reliability are often unnecessarily poor and 
that strategies to manage these risks to patients are much needed. However, there 
are more fundamental reasons for widening our view of safety strategies beyond 
trying to improve reliability. The more critical point is that different challenges 
and different types of work require different safety strategies. One safety size does 
not fit all. 


Approaches to Risk and Hazard: Embrace, Manage or Avoid 


The metaphor of the climber and the rock face serve as a framework to introduce our 
discussion of contrasting approaches to safety. Hazards in healthcare are like rock 
faces for climbers, an inevitable part of daily life. These hazards have to be faced 
but this can be done in very different ways. One can minimize the risk by refusing 
to climb unless conditions are perfect (plan A). Alternatively one can accept higher 
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levels of risk but prepare oneself to manage the risk effectively. A climber or team 
of climbers may attempt a dangerous rock face but only after careful preparation, 
establishing clear safety procedures and plans for dealing with emergencies. A well 
prepared and coordinated team can achieve much higher levels of safety than an 
individual (plan B). Finally, a climber may simply embrace risk and rely on per- 
sonal skill and resilience to deal with whatever occurs. They may climb without 
proper equipment, without training or in deteriorating weather conditions; or more 
dangerous still they may dare to climb unknown rock faces taking massive risks in 
the spirit of personal challenge and competitive achievement (plan C). All these 
climbers are concerned with safety but they vary in the risks they are prepared to 
take and the strategies they adopt (Amalberti 2013). 

Some professions, such as fighter pilots, deep sea fishing skippers and profes- 
sional mountaineers, literally make a living from exposure to risk. In these profes- 
sions, accepting risk, and even seeking out risk, forms the essence of their work. 
These professions do, however, still want to improve safety. A number of studies 
carried out among fighter pilots (Amalberti and Deblon 1992) and sea fishing skip- 
pers (Morel et al. 2008, 2009) show that they have a real desire for safety. Fishing 
skippers, for example, would like to have an intelligent anti-collision system to offer 
them better protection in high seas and with poor visibility which would give 
increased mobility for trawling. Fighter pilots would like an electronic safety net to 
offer them better protection when they are undertaking manoeuvres that may cause 
them to lose consciousness. 

People who rely on their personal skill and resilience are not reckless; a few 
may be but they are not likely to survive long. They usually have a core set of 
safety procedures that they take very seriously. The problem is that the constantly 
changing environment in which they work does not lend itself to managing risk by 
using rules and procedures. (If they did, one would change to a plan B approach). 
Instead, the response is necessarily ad-hoc because the environment is constantly 
changing and because economic considerations often drive people to take greater 
risks. Plan C solutions are essentially resilient in character: becoming more expert, 
becoming able to judge the difficulty of the task, being realistic about one’s own 
skills and acquiring experience which allows adaptation to uncertain or dangerous 
conditions. 

In contrast, the high levels of safety in civil aviation are achieved by very differ- 
ent means. Here, the solution is radically different and frequently involves not 
exposing crews to the hazardous conditions that increase the risk of accidents. For 
example, the eruption of the Eyjafjallajökull volcano in Iceland in 2010 led to all 
European aircraft immediately being grounded based on a simple approach: no 
unnecessary exposure to risk. Deep sea fishing and commercial aviation reveal con- 
trasting strategies for dealing with risk. The first, typical of very competitive and 
dangerous activities, involves relying on the intelligence and resilience of frontline 
operators and giving them aids to deal with risk; the other relies on organisation, 
control and supervision and ensures that operators are not exposed to risks. Both of 
these models take safety very seriously but they manage risk in very different ways 
(Fig. 3.1). 
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Three contrasting approaches to safety 


Taking risks is the essence 
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Deep sea fishing, military in war time, drilling 
industry, rare cancer, treatment of trauma. 
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conditions. 


Training through peer-to-peer learning 
shadowing, acquiring professional 


Context: Risk is not sought out but is 
inherent in the profession: 

Marine, shipping, oil Industry, fire-fighters, 
elective surgery. 


fety Power to the group to 
organise itself, provide mutual protection, 
apply procedures, adapt, and make sense 
of the environment. 


Training in teams to prepare and rehearse 
flexible routines for the management of 


Ultra safe 
Avoiding risk 


Context: Risk is excluded as far as 
possible: Civil aviation, nuclear Industry, 
public transport, food industry, medical 
laboratory, blood transfusion. 


Safety model: Power to regulators and 
supervision of the system to avoid 


exposing front-line actors to unnecessary 
risks. 


Training in teams to apply procedures for 
both routine operations and emergencies. 


experience. knowing one's own limitations. hazards. 
Priority to prevention strategies 
Innovative medicine Scheduled surgery Anaesthesiology ASA1 Radiotherapy 
Trauma centers Chronic care Blood transfusion Z 
& 
3 
g 
a 
2 
k: 
10-2 10-3 10-4 10-5 10-6 
Very unsafe Unsafe Safe Ultra safe 


Fig.3.1 Three contrasting approaches to safety 


Three Approaches to the Management of Risk 


We can then distinguish three broad approaches to the management of risk each 
with its own characteristic approach. Each one has given rise to an authentic way of 
organising safety with its own characteristic approach and its own possibilities for 
improvement (Grote 2012; Amalberti 2013). In practice the distinctions may not be 
that clear cut but the division into three models serves to illustrate the principal 
dimensions and factors in play (Box 3.1). 


Box 3.1 A Note on Terminology 

We have chosen three terms to describe contrasting approaches to safety: ‘ultra- 
adaptive’, high reliability and ‘ultra-safe’. All of these terms, particularly the first 
two, are associated with a number of theories and concepts. In this book we use 
these terms in a more descriptive sense. ‘Ultra-adaptive’ simply means that this 
approach relies heavily on the judgement, adaptability and resilience of individu- 
als; ‘high reliability’ does indeed reflect the literature on high reliability organisa- 
tions (HROs), but here is mainly meant to indicate a flexible but prepared response 
of teams in the management of risk; ‘ultra-safe’ refers to the absolute priority 
safety has in those environments and to the means of achieving such safety. 
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Embracing Risk: The Ultra-adaptive Model 


This approach is associated with professions in which seeking exposure to risk is 
inherent in the activity and often also embedded in the economic model of that pro- 
fession. Skilled professionals sell their services on the basis of their expertise and 
willingness to embrace risk, master new contexts, cope and win through, reaping 
benefits where others fail or are afraid to go. This is the culture of champions and 
winners, and there are of course those who fail to meet the challenges or who are 
injured or die in the attempt. This tends to be explained in personal terms; they did 
not have the knowledge or skill of the champions; they did not have the ‘right stuff’ 
to be part of these elite groups (Wolfe 1979). Deep sea fishing skippers, for exam- 
ple, are willing to seek out the riskiest conditions in order to catch the most profit- 
able fish at the best times. Such professions are very dangerous and have appalling 
accident statistics. They are not, however, insensitive to the risks they run. They 
have safety and training strategies which are very well thought-out, but they are 
highly reliant on individual skills and strongly influenced by their own particular 
culture. 

Within the ultra-adaptive model individual autonomy and expertise take precedence 
over the hierarchical organisation of the group. In many cases the group is very small 
(consisting of two to eight individuals) and works in a highly competitive environment. 
The leader is recognised for technical ability, past performance and charisma more than 
his official status. Everyone involved has to use a high degree of initiative. Skill, cour- 
age and accumulated experience combined with a clear-eyed awareness of personal 
strengths and limitations are the keys to recognition as a good professional. Success is 
seen in terms of winning and surviving, and only winners have a chance to communi- 
cate their safety expertise in the form of champions’ stories. 

To summarise, there are a small number of procedures, a very high level of 
autonomy and a very large number of accidents. Becoming more effective and 
learning to manage risk are achieved by working alongside experts, learning from 
experience and increasing one’s own capacity to adapt and respond to even the 
most difficult situations. The differences between the least safe and the safest oper- 
ators within a single resilient, skilled trade are of the order of a factor of 10; for 
instance the rate of fatal accidents in professional deep-sea fishing varies by a fac- 
tor of 4 between ship owners in France and by a factor of 9 at the global level 
(Morel et al. 2009). This suggests that that it is certainly possible to make progress 
through safety interventions within this particular model of safety; there may how- 
ever be a limit to what can be achieved without moving to a different model of 
safety which in turn would require a radically different approach to the activities 
concerned (Amalberti 2013). 


Managing Risk: The High Reliability Approach 


The term high reliability or high reliability organisation (HRO) is most associated 
with a series of studies of industries in which highly hazardous activities, such as 
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nuclear power and aircraft carriers, were managed safely and reliably. A very wide 
variety of characteristics were identified as characterising high reliability organisa- 
tions but all were underpinned by a disciplined but flexible approach to teamwork 
(Vincent et al. 2010). This approach also relies heavily on personal skill and resil- 
ience but in a more prepared and organized way; individual initiative must not 
come at the expense of the safety and success of the wider team (Weick and 
Sutcliffe 2007). 

This approach is also associated with hazardous environments but the risks, 
while not entirely predictable, are known and understood. In these professions risk 
management is a daily affair, though the primary aim is to manage risk and avoid 
unnecessary exposure to it. Firefighters, the merchant navy, operating theatre teams, 
and those operating chemical factories all face hazards and uncertainty on a daily 
basis and typically rely on a high reliability model. 

The HRO approach relies on leadership and an experienced professional team, 
which usually incorporates several different roles and types of expertise. All mem- 
bers of the group play a part in detecting and monitoring hazards (sense making), 
bringing them to the attention of the group, adapting procedures if necessary, but 
only when this makes sense within the group and is communicated to everyone. The 
HRO model is in fact relatively averse to individual exploits that are outside the 
usual repertoire of the team. The resilience and flexibility of approach employed is 
that of a dynamic and well-coordinated team rather than that of an individual acting 
on their own. All members of the group show solidarity in terms of safety objectives 
and the team promotes prudent collective decision-making. 

The teams who work within this model place great importance on analysing 
failures and seeking to understand the reasons behind them. The lessons drawn from 
these analyses primarily concern ways in which similar scenarios could be managed 
better in future. This is therefore a model which relies firstly on improving detection 
and recovery from hazardous situations, and secondly on improving prevention — 
which means avoiding exposure to difficult situations when possible. Training is 
based on collective acquisition of experience. Once again, the differences between 
the best operators and those that are less good within a single trade are of the order 
of a factor of 10. 


Avoiding Risk: The Ultra-safe Approach 


With this approach we turn radically away from reliance on human skills and inge- 
nuity towards a reliance on standardization, automation and avoidance of risk 
wherever possible. Professionalism in these contexts still requires very high levels 
of skill but the skills consists primarily in the execution of known and practiced 
routines, covering both routine operations and emergencies. Ideally, there is no 
need to rely on exceptional expertise even when dealing with emergencies, such as 
an engine fire on a commercial aircraft. Instead comprehensive preparation and 
training allows all operators to meet the required standards of performance and 
be skilled to the point that they are interchangeable within their respective roles. 
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This approach relies heavily on external oversight and the control of hazards which 
makes it possible to avoid situations in which frontline staff are exposed to excep- 
tional risks. By limiting the exposure to a finite list of breakdowns and difficult 
situations, the industry can become almost completely procedural, both when 
working under normal conditions and under more difficult conditions. Airlines, the 
nuclear industry, medical laboratories and radiotherapy are all excellent examples 
of this category. Accidents are analysed to find and eliminate the causes so that 
exposure to these risky conditions can be reduced or eliminated in the future. 
Training of front-line operators is focused on respect for their various roles, the 
way they work together to implement procedures and how to respond in a prepared 
manner to any emergency, so that there is minimal need for improvised ad hoc 
procedures. Once again, the best and the least good operators within a single pro- 
fession differ by about a factor of 10.! 


Rules and Adaptation 


We commonly assume that safety is achieved by imposing rules and restricting the 
autonomy of management and workers. We know however that writing a safety 
plan, specifying rules and compliance to legal requirements, offers no guarantee 
that the plan will be put into practice. There is a great deal of evidence about the 
extent of non-compliance to rules and safety standards and a recurring list of rea- 
sons for not adhering to the rules — too many, not understood, not known, not apply- 
ing to non-standard cases, contradictions between rules and so on (Lawton 1998; 
Carthey et al. 2011). Moreover, workers in many organisations find that it is often 
necessary to by-pass or flout rules to get the job done in a reasonable time; these are 
‘optimising violations’ in James Reason’s memorable phrase (Reason 1997). 

The three approaches to safety take radically different approaches to rules and 
procedures on the one hand and flexibility and adaptation on the other. Each 
approach has its own approach to training, to learning and improvement and each 
has its own advantages and its own limitations (Amalberti 2001; Amalberti et al. 
2005). They can be plotted along a curve in which there is a trade-of between flex- 
ibility and adaptability on the one hand and standardisation and procedures on the 
other. It is important to acknowledge that while these approaches vary considerably 
in the way they manage risk all share the same ambition of being as safe as possible 
in the circumstances in which they operate. 

Concrete safety results are therefore the product of apparent contradictory 
actions: rules and constraints that guide work on the one hand and reliance on the 
adaptive capacities of staff in scenarios that fall outside guidelines, rules and regula- 
tions. Staff sometimes fail to follow rules in a reckless or careless manner (i.e. for 
no good reason) but equally often the rules are ignored because they impede the 


'The rate of aviation accidents ranges from 0.63 per million departures in Western countries to 
7.41 per million departures in African countries. These therefore differ by a factor of 12, source: 
IATA statistics, 23 February 2011, http://www.iata.org/pressroom/pr/pages/201 1-02-23-01.aspx 
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actual work itself. In healthcare we have the highly undesirable situation of a vast 
number of procedures and guidelines (far too many for staff to follow or even know 
about) which are followed inconsistently (Carthey et al. 2011). One critical task for 
healthcare in all settings, whether adaptive or standardised, is to identify a core set 
of procedures which really do have to be reliably followed. 


How Many Models for Healthcare? 


For the sake of simplicity we have viewed each industry as primarily being asso- 
ciated with one particular model. The reality is more complicated. For instance 
the activity of drilling for oil necessarily involves embracing risks; oil processing 
on the other hand, while hazardous, can potentially be managed in a way that 
minimises risk. 

Healthcare is a particular complex environment. We have already alluded to this 
when commenting that healthcare is ‘twenty different industries’. Consider the hos- 
pital environment with multiple types of work, many different professions and vary- 
ing working conditions across clinical environments. There are areas of highly 
standardized care which conform very closely to our ultra-safe model. These include 
pharmacy, radiotherapy, nuclear medicine and much of the process of blood transfu- 
sion. All of these are highly standardized and rely heavily on automation and infor- 
mation technology. They are islands of reliability within the much more chaotic 
wider hospital environment. In contrast much ward care corresponds to our interme- 
diate model of team based care where standards and protocols provide important 
controls on hazards (such as infection from poor hand hygiene) but where profes- 
sional judgement and flexibility is essential to providing safe, high quality care. 

Other sections of the hospital, such as emergency surgery, deal continually with 
complex cases and have to work in very difficult conditions. The work may be 
scheduled but there is considerable hour-to-hour adaptation due to the huge variety 
of patients, case complexity, and unforeseen perturbations. We should emphasise 
though that all clinical areas, no matter how adaptive, rely on a bedrock of core 
procedures; adaptive is a relative term not an invitation to abandon all guidelines 
and go one’s own way. In addition, much clinical activity could be much more con- 
trolled than is often the case. In many hospitals elective and emergency surgery are 
still carried out by the same teams on the same day which ensures constant disrup- 
tion to the routine procedures and insufficient focus on emergency patients, moving 
the whole system to a highly adaptive mode. Separating elective and emergency 
work and allocating separate teams to deal with each allows both areas to operate in 
a largely high reliability mode. 

All of these professional activities have to adapt to changing staffing patterns and 
other pressures on the system. On “Tuesday morning’ (optimum working condi- 
tions) it may be possible for an emergency surgery team to adopt the characteristics 
of a HRO system. In contrast on ‘Sunday night’ (short staffed, lack of senior staff, 
lack of laboratory facilities) the team is forced to rely on a more adaptive approach. 
Healthcare is a wonderful arena for the study of safety, probably much better than 
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any other setting, because the entire range of approaches and strategies can be found 
within one industry. 


Moving Between Models 


We sometimes assume that the safety ideal is the ultra-safe model of commercial 
aviation and other highly standardized processes. In a sense this is correct, in that 
this model is indeed very safe, but we have argued that this model is only workable 
with very specific conditions and strong constraints on risky activity. The model 
may not be appropriate, or even feasible, in other settings. Nevertheless in certain 
activities we can identify a move between different models according to 
circumstances. 

The case of fighter pilots is a special and interesting case of a dual context: in 
peacetime, the air force requires them to operate in an essentially ultra-safe mode, 
but once the aircraft are deployed on active service, the operating model immedi- 
ately becomes one of adaptation and resilience. The switch between these modes of 
operation can generate surprises in both directions. After returning from military 
campaigns pilots can persist in resilient and deviant behaviour as they struggle to 
return to peace time conditions. Conversely, when pilots are suddenly thrust from 
peacetime into operational theatre, important opportunities can be missed during 
the first few days of military engagement due to lack of practice in the resilient 
model. 

Surgery offers similar parallels in that different forms of surgery correspond to 
different models and the same surgeons may need to adapt to different approaches. 
Highly innovative surgery, such as early transplant surgery, or surgery conducted in 
unusual environments such as field hospitals, clearly requires a risk embracing 
highly adaptive approach. The phrase ‘heroic surgery’ speaks exactly to this kind of 
intervention with the allusions to the personal qualities of the surgeon that are 
required, although greater heroism is probably required of the patient. We can see 
also that patients may also choose strategies which are very risky but yet are justi- 
fied by the severity of the illness and the potential benefit. 

Over time certain kinds of surgery may evolve through different models, begin- 
ning as a very high risk experimental procedure, moving towards a stage in which 
risks can be managed through to a stage of very consistent, safe and highly stan- 
dardized care. Much surgery relies on team based approaches using the intermediate 
model, but some types of surgery that are very well understood can now be consid- 
ered in the category of ultra-safe. Units that focus entirely on a single operation, 
such as cataract or hernia, achieve very consistent results and high levels of safety, 
though this may partly be achieved by careful patient selection. We must recognise 
that this approach cannot be the decision of the team alone; ultra-safe surgery 
requires a highly stable and controlled environment underpinned by very reliable 
basic processes. 

In unusual circumstances any team, no matter how proceduralised the environ- 
ment, may have to adapt, respond and recover. Conversely highly adaptive teams 
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still need a core of rock solid procedures which are closely adhered to. A healthcare 
team might, in one afternoon, work in an ultra-safe manner at some points, such as 
when a care pathway is clearly defined and entirely appropriate for the patient; they 
may work in a high-reliability mode for the main part and, for short periods, in an 
ultra-adaptive mode. Longer term approaches to the underlying approach however 
require quite substantial adjustment not just within the team but in the wider organ- 
isation and possibly also in the regulatory environment. 

A move to a new approach to safety is possible in some circumstances but it 
often only occurs after an event that affects the entire profession and its economy. 
The industrial chemical industry, for example, which in some cases is still based on 
adaptive models dating from the 1960s and 1970s, made a definitive switch to an 
HRO model after the events that occurred in Seveso in Italy in 1976 and the European 
Directive that followed in 1982. In this case and many others the transition to a new 
approach is not led from within the industry but forced by regulatory authorities and 
government. When this happens a prolonged period of adjustment is needed during 
which the system migrates gradually, loses the benefits of the previous model (a 
higher level of adaptation and flexibility), but gains the advantages of the new model 
(mainly in terms of safety). A permanent move to a new approach to safety cannot 
take place without changing the working conditions imposed by the external envi- 
ronment. A change in model must also be accepted by the front line operators and 
be consistent with the values and culture of both the team and the wider organisa- 
tion. If you cannot change these conditions, safety improvements will be modest 
and restricted to local improvement. If you stay ‘within the model’ then one may 
improve safety by a factor of 10, whereas if the system can be protected and given 
stability then it can be moved to a different category with impressive safety gains. 


Reflections on the Safety Ideal 


The idea of a single ideal model of safety that applies to everything and aims to have 
zero accidents is too simple. Safety is only ever considered in relation to other 
objectives and those objectives may be valuable but also risky. We are never in the 
position of being able to aim for absolute safety but only to be as safe as possible 
given our objectives and tolerance for risk. Different contexts provoke different 
approaches safety, each with their own approach, advantages and limitations. The 
differences between these models lie in the trade-off between the benefits of adapt- 
ability and the benefits of control and safety. A different model may be intrinsically 
more effective, but may not be feasible in the context in question. Many aspects of 
healthcare for instance primarily rely on a high reliability approach but could move 
towards an ultra-safe model with additional resources and control of demand. 
However, while some change could be effected within healthcare, a more substan- 
tial adjustment would probably require a radically different approach to managing 
demand which is currently not politically feasible. Models of safety are ultimately 
context dependent and will vary by discipline, organization, governance and 
jurisdiction. 
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Key Points 

e Safety is approached very differently in different environments. In some 
environments and professions risk is embraced, in some it is managed and 
in others it is controlled. 

e We distinguish three classes of safety models: an ultra-adaptive approach 
associated with embracing risks, the high reliability approach managing 
risks, and the ultra-safe approach which relies heavily on avoiding risks. 

e The three models reflect the degree to which the environment is unstable 
and unpredictable. Very high levels of safety can only be achieved in very 
controlled environments 

e Intervention strategies must be adapted to these models, giving importance 
to experts in ultra-adaptive contexts, to teamwork in HRO contexts, and to 
standardisation, oversight and control in ultra-safe contexts. 

e Healthcare has many different types of activity and clinical settings. Areas 
of highly standardized care, such as radiotherapy, conform to an ultra-safe 
model. In contrast much ward care corresponds to an intermediate model 
of team based care, employing a combination of standards and protocols, 
professional judgement and flexibility. 

e Some clinical activities such as emergency surgery are necessarily more 
adaptive. The work may be scheduled but there is considerable hour-to- 
hour adaptation due to the huge variety of patients, case complexity, and 
unforeseen perturbations. 

e All clinical areas, no matter how adaptive, rely on a bedrock of core proce- 
dures; adaptive is a relative term not an invitation to abandon all guidelines 
and go one’s own way. 

e A permanent move to a new approach to safety cannot take place without 
a change in working conditions imposed by the external environment. A 
change in model must also be accepted by front line operators and be con- 
sistent with the values and culture of both the team and the wider 
organisation. 

e Different contexts provoke different approaches to safety, each with their 
own approach, advantages and limitations. The difference between models 
lies in the trade-off between the benefits of adaptability and the benefits of 
control and safety. A different model may be intrinsically safer but not be 
feasible in a particular context. 


Open Access This chapter is distributed under the terms of the Creative Commons Attribution 
Noncommercial License, which permits any noncommercial use, distribution, and reproduction in 
any medium, provided the original author(s) and source are credited. 
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Patient harm happens in every healthcare setting: at home in convalescence, in the nursing home 
at physiotherapy, in an operating room under anaesthesia, in the hospital corridor lying alone on 
a stretcher, at the walk-in clinic with the paediatrician, in the emergency department awaiting 
physician assessment. Harm occurs as a result of failures in patient care, rather than from the 
natural progress of illness or infirmity. Harm may result from wrong or missed diagnosis, sched- 
uling delay, poor hygiene, mistaken identity, unnoticed symptoms, hostile behaviour, device 
malfunction, confusing instructions, insensitive language and hazardous surroundings. 

The trajectory of harm begins with the unexpected experience of harm arising from or 
associated with the provision of care, including acts of both commission and omission. The 
initial consequence of harm may be fleeting, temporary or permanent, including death. Harm 
also may not cease even when the cause is halted. The patient may experience harm during the 
episode of care when the failure occurred, or later, after some time has passed. Harm as it is first 
endured may evolve, transform and spread. Over time, untreated harm may cause further dam- 
age to the initial victim, both temporary and permanent, and to many others. (Canfield 2013) 


Consider these reflections on patient harm written by Carolyn Canfield whose 
husband’s care was very poorly managed at the end of his life. This is a description 
of harm written from the patient’s side and in several respects it is strikingly differ- 
ent from the accounts of incidents and adverse events described by healthcare pro- 
fessionals. Three things in particular stand out: 


e First, harm is conceived very broadly encompassing both serious disruption of 
treatment and lesser events that are more distressing than injurious. 

e Second, harm for a patient includes serious failures to provide appropriate treat- 
ment as well as harm that occurs over and above the treatment provided. Very 
poor quality care is therefore seen as harmful and included within patient safety. 

e Third, and perhaps most important, harm is seen not in terms of incidents but as 
a trajectory within a person’s life. Both the genesis and consequences of harm 
occur over time and the timescales are very much longer than those normally 
considered. Incidents are simply those aspects of harm that are observed by 
healthcare professionals and, while important, they are a necessarily incomplete 
vision. 
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We are now moving to a rather different vision of patient safety. Our previous vision 
might reasonably be described as one of generally high quality healthcare punctuated 
by occasional safety incidents and adverse events. We now recast patient safety as the 
examination of serious failures and harm along the patient journey which must of 
course be seen in the context of the benefits of the healthcare received. This requires us 
to view both benefit and harm from the perspective of the patient, not because this is 
ideologically or politically correct, but because this is the reality we need to capture. 


What Do We Mean by Harm? 


Patient safety initially focused on rare, often tragic, events. However, as safety was 
more systematically studied it became clear that the frequency of error and harm 
were much greater than previously realised and that the safety of all patients needed 
to be addressed. Most patients are vulnerable to some degree to infections, adverse 
drug events, falls, and the complications of surgery and other treatments. Patients 
who are older, frailer or have several conditions may experience the adverse effects 
of over-treatment, polypharmacy and other problems such as delirium, dehydration 
or malnutrition. In addition, patients may also suffer harm from rare and perhaps 
unforeseeable events, stemming from new treatments, new equipment or rare com- 
binations of problems that could not easily have been foreseen. If we want to assess 
harm from healthcare then we have to consider all these kinds of events. 

Harm can be defined in various ways and there is no absolute border, particularly as 
the perimeter of patient safety is constantly expanding as we have discussed. Some 
types of events, such as a drug overdose with consequences for the patient, can be 
clearly described as a harmful event caused by healthcare. Harm that results from a 
failure of treatment is more difficult. For instance if a patient was not given appropriate 
prophylactic medication and then suffered a thromboembolism the harm, or at least the 
causation, is not so clear cut. With diagnostic delay, the notion of harm is more difficult 
still. Increasingly though failures to recognise deterioration and failure to institute 
treatment are being described as patient safety issues (Brady et al. 2013). Whether or 
not we would describe all these events as harmful we can all agree that they are unde- 
sirable and represent serious failures in the care of the patients concerned (Box 4.1). 


Box 4.1 Examples of Types of Harm in Healthcare 

General harm from healthcare 

Hospital-acquired infections, falls, delirium and dehydration are examples of 
problems that can affect any patient with a serious illness. 

Treatment-specific harm 

Harm that is associated with a specific treatment or the management of a par- 
ticular disease which may or may not be preventable. This would include 
adverse drug events, surgical complications, wrong site surgery and the 
adverse effects of chemotherapy. 
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Harm due to over-treatment 

Patients may also be harmed from being given too much treatment, either 
through error (for instance a drug overdose) or from well-intended but exces- 
sive intervention. For example, excessive use of sedatives increases the risk of 
falls; people near the end of life may receive treatments that are painful and of 
no benefit to them. 

Harm due to failure to provide appropriate treatment 

Many patients fail to receive standard evidence-based care and for some this 
means their disease progresses more rapidly than it might. Examples include 
failure to provide rapid thrombolytic treatment for stroke, failure to provide 
treatment for myocardial infarction, and failure to give prophylactic antibiot- 
ics before surgery. 

Harm resulting from delayed or inadequate diagnosis 

Some harm results because the patient’s illness is either not recognised or is 
diagnosed incorrectly. For example, a patient may be misdiagnosed by their 
primary care physician, who fails to refer them; the cancer advances and the 
outcome may be poorer. 

Psychological harm and feeling unsafe 

Instances of unkindness can linger in the memory of vulnerable people and affect 
how they approach future encounters with healthcare professionals. Awareness of 
unsafe care may have wider consequences if it leads to a loss of trust. For instance, 
people may be unwilling to have vaccinations, give blood or donate organs. 


Adapted from Vincent et al. (2013) 


Reflecting on the many ways in which healthcare can fail or harm patients it is 
clear that much of it is insidious, develops slowly and, if not addressed, may result in 
a crisis involving admission to hospital or other urgent treatment. A frail person in 
hospital who gradually becomes delirious receives care that is sub-standard to the 
point of being harmful but this cannot really be captured by thinking in terms of 
errors or incidents. When we consider care outside hospital the concept of ‘an inci- 
dent’ breaks down even further. Consider, for instance, a patient who reacts adversely 
to prescribed anti-depressant medication over a period of several months culminating 
in an admission to hospital. We know that adverse drug reactions are implicated in 
about 5 % of hospital admissions (Winterstein et al. 2002; Stausberg et al. 2011) but 
the harm preceding these events has a timescale of months. Moreover harm of this 
kind cannot be seen in terms of ‘error’ at least not an error on any specific occasion. 


Safety and Quality of Care from the Patient’s Perspective 


When we view our care as patients we see the course of our disease and the care we 
receive over time and in the context of our lives. Of course there are episodes of care 
but we assess our experience and the impact of healthcare in terms of the totality of 


42 4 Seeing Safety Through the Patient’s Eyes 


Treatment of arthritis Treatment of hip fracture 


Safety and quality of care 
a A oo N - 
Safety and quality of care 
ao fF oD = 


Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec 
... Standard of treatment of arthritis —— Standard of treatment of hip fracture 
Treatment of diabetes Treatment of depression 
e | ai 
3 3 
Se 3? 
2 2 
z3 33 
a =. 
a o 
B4 EA 
kd G 
> 
g5 s 
s oO 
a oO 
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec 
Standard of treatment of diabetes Standard of treatment of depression 


Fig.4.1 Four patient journeys 


our treatment and the overall balance of benefit and harm. How can we represent 
this in terms of the safety and quality of care and the various scenarios that we might 
wish to encompass? 

Consider the four patient journeys represented in Fig. 4.1. In each case the graph 
provides a simple representation of the quality of care each patient receives over 1 
year for the treatment of different conditions. The horizontal axis represents time 
and the vertical axis shows the standard of care provided (not the health of the 
patient or severity of their condition). The five levels discussed in Chap. 2 are shown 
on the left with good care shown at the top of the graphs with deteriorating or dan- 
gerous care shown by declining levels. 


e The first person is receiving long-term treatment for osteoarthritis. Both treat- 
ment and monitoring are of a high standard, consistent over time and the overall 
quality of care is excellent. 

e The second person sustains a fracture of the hip in April. Initial treatment is 
excellent, with prompt admission to hospital and rapid and effective surgery. 
However, in the post-operative period the patient develops a serious wound 
infection which is not immediately recognised by the nurse visiting at home. The 
infection worsens, a second admission to hospital is required but the infection is 
effectively treated and recovery is then uneventful. Overall quality of care is 
good, with one serious lapse during May. 

e The third person is being treated for diabetes, initially effectively. However from 
the beginning of the year care deteriorates in that monitoring is not effective and 
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Fig.4.2 Varying standards of care over time 


becomes progressively more sporadic, resulting in admission to hospital with 
potentially life threatening complications in August. Hospital care is excellent 
however and the patient makes a good recovery. 

e The fourth person is receiving partially effective treatment for depression. Monitoring 
is infrequent, treatment is not optimal but there are no major crises during the year. 
Quality of care hovers around our level 3 — poor, but still reasonably safe. 


These four scenarios are relatively straightforward and, in many healthcare set- 
tings, the patient’s care and progress could be monitored to some extent. We could 
assess the outcome of the hip replacement, record the post-operative infection and 
monitor the frequency of treatment for arthritis, diabetes and depression in primary 
care. However, we should now consider a different but more realistic scenario that 
more truly represents the balance of benefit and harm that we ideally wish to cap- 
ture, understand and influence. This is the person who suffers from and receives 
treatment for a number of conditions at the same time. 

Consider a person who suffers from arthritis, diabetes and depression and who 
sustains a hip fracture during the year. Figure 4.2 shows the four individual 
graphs combined for this patient with an additional second axis to give an assess- 
ment of the overall quality of life for this patient during this year of tribulation. 
As before the care for arthritis remains of high quality throughout the year, the 
care of the hip fracture generally very good but interrupted by an initially unrec- 
ognised post-operative infection. Treatment of diabetes remains problematic and 
we might suspect, from looking at the decline in quality of care after April, that 
the hospital admission and subsequent infections may have disrupted the usual 
monitoring. We can also very clearly see how complex healthcare is from the 
perspective of the patient and that very few of the healthcare professionals 
involved are likely to have a sense of the impact of good and poor healthcare on 
this person’s life. 
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Safety Through the Patient's Eyes 


In this chapter we have conceptualised safety in the context of a patient’s healthcare 
journey showing good quality care but also encompassing a number of types of seri- 
ous failure and harm. The implications of this way of approaching safety will be 
explored in detail in the second section of the book but it will be useful to indicate 
some general directions here. 


The Patient Potentially Has the Most Complete Picture 


The most obvious point to emerge from studying treatment over time is that the 
patient is, even more than in hospital, a privileged witness of events. Patient reported 
outcome measures are of course already a high priority, but we clearly need to begin 
to find ways of tracking patient experience of healthcare over time and integrating 
this information with available clinical information. This is easy to say but likely to 
be a task of considerable difficulty. 


The Healthcare professional's View Is Necessarily Incomplete 


Each healthcare professional involved with a patient will only have a partial view 
of the patient journey. Even within hospital, whether notes are electronic or paper, 
it can be difficult to understand the trajectory of patient care. The problem is even 
more acute outside hospital. A good general practitioner or family doctor is best 
positioned to understand the full patient journey, but we will need to develop meth- 
ods of representing the full perspective of care that can be shared across different 
settings. 


The Resources of the Patient and Family Are Critical to Safe Care 


Increasingly patients and families are managing the complex work of coordinating 
their care. The formal assessment of these resources, financial, emotional and prac- 
tical will become essential to the coordination of care and the idea of the patient as 
part of the healthcare team will move from being an aspiration to a necessity. This 
can certainly bring benefits in terms of patient engagement and patient empower- 
ment but also carries risks as patients shoulder the burden of organising and 
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delivering care and the locus of medical error moves from professionals to patients 
and families. 


Coordination of Care Is a Major Safety Issue 


Patients with multiple problems already have multiple professionals involved in their care 
and face major challenges in coordinating their own care. Poor communication across 
different settings is frequently implicated in studies of adverse events in hospital and in 
inquiries into major care failures in the community. Safety interventions in these settings 
may be less a matter of care bundles and more concerned with wider organisational inter- 
ventions to ensure rapid response to crises and coordination between agencies. 


Rethinking Patient Safety 


At the beginning of this chapter we argued that the way we currently view patient 
safety assumes a generally high quality of healthcare punctuated by occasional 
safety incidents and adverse events. Increasingly we see this as a vision of safety 
from the perspective of healthcare professionals. This is a sincere vision in that 
professionals naturally assume that for the most part they are giving good care 
though they know that there are occasional lapses. 

In contrast we have expanded our view of harm and recast patient safety as the 
examination of the totality of serious failures and harm within the patient journey 
which must necessarily be set against the benefits of the healthcare received. This 
is a vision of safety from the perspective of the patient, carer and family. 

We believe that future progress in safety depends on conceptualizing safety in 
this broader manner and linking our understanding of safety with the wider ambi- 
tions and purposes of the healthcare system. This means viewing the risks and 
benefits of treatments over a longer timescale across different contexts and criti- 
cally within the realities of a fragmented system with multiple vulnerabilities. This 
will require moving from a focus on specific errors and incidents to examining the 
origins of more fundamental failures of care such as avoidable hospitalisation due 
to undetected deterioration in a long term condition. The longer term aim both for 
patients and for patient safety is to consider how risk and harm can be minimised 
along the patient journey in pursuit of the optimum benefits from healthcare. In the 
following chapters we develop these ideas in more detail and consider how this 
ambitious, but we believe necessary, programme might be undertaken. 


46 4 Seeing Safety Through the Patient's Eyes 


Key Points 

e Patients have a different view of harm to professionals. Harm is conceived 
very broadly encompassing both serious disruption of treatment and lesser 
events that are more distressing than injurious. 

e Harm for a patient includes serious failures to provide appropriate treat- 
ment as well as harm that occurs over and above the treatment provided. 
Both benefit and harm are seen not in terms of incidents but as a trajectory 
within a person’s life. 

e Many patient-identified events are not captured by the incident reporting 
system or recorded in the medical record. 

e We propose that patient safety should focus on the totality of harm within 
the patient journey which must necessarily be set against the benefits of the 
healthcare received. This is a vision of safety from the perspective of the 
patient, carer and family. 

e Patients and families will increasingly need to be actively involved in pro- 
moting safety. This can certainly bring benefits in terms of patient engage- 
ment and patient empowerment but also carries risks as patients shoulder 
the burden of organising and delivering care and the locus of medical error 
moves from professionals to patients and families. 

e We need to view the risks and benefits of treatments over a longer times- 
cale, across different contexts and within the realities of a fragmented sys- 
tem with multiple vulnerabilities. This will require moving from a focus on 
specific incidents to examining more fundamental longer term failures 
such as avoidable hospitalisation due to undetected deterioration in a 
chronic condition. 

e We believe that future progress in safety depends on conceptualizing safety 
in this broader manner and linking our understanding of safety with the 
wider ambitions and purposes of the healthcare system. 
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Every high-risk industry devotes considerable time and resource to investigating 
and analysing accidents, incidents and near misses. Such industries employ many 
other methods for assessing safety but the identification and analysis of serious 
incidents and adverse events continues to be a critical stimulus and guide for safety 
improvement. Analyses of safety issues always require review of a range of infor- 
mation and recommendations should generally not be made on the basis of a single 
event. Nevertheless, an effective overall safety strategy must in part be founded on 
an understanding of untoward events, their frequency, severity, causes and contribu- 
tory factors. In this chapter we consider how these analyses might need to be 
extended in the light of the arguments presented in the preceding chapters. 


What Are We Trying to Learn When We Analyse Incidents? 


A clinical scenario can be examined from a number of different perspectives, each of 
which may illuminate facets of the case. Cases have, from time immemorial, been used 
to educate and reflect on the nature of disease. They can also be used to illustrate the 
process of clinical decision making, the weighing of treatment options and, particularly 
when errors are discussed, the personal impact of incidents and mishaps. Incident anal- 
ysis, for the purposes of improving the safety of healthcare, may encompass all of these 
perspectives but critically also includes reflection on the broader healthcare system. 

A critical challenge for patient safety in earlier years was to develop a more 
thoughtful approach to both error and harm to patients. Human error is routinely 
blamed for accidents in the air, on the railways, in complex surgery and in health- 
care generally. Immediately after an accident people make quick judgments and, all 
too often, blame the person most obviously associated with the disaster. The pilot of 
the plane, the doctor who gives the injection, the train driver who passes a red light 
are quickly singled out (Vincent et al. 1998). This rapid and unthinking reaction has 
been described by Richard Cook and David Woods as the ‘first story’ (Box 5.1). 
However while a particular action or omission may be the immediate cause of an 
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incident, closer analysis usually reveals a series of events and departures from safe 
practice, each influenced by the working environment and the wider organizational 
context (Reason 1997; Vincent et al. 2000). The second story endeavours to capture 
the full richness of the event without the obscuring lens of hindsight and see it from 
the perspective of all those involved which should, ideally, include the perspective 
of the patient and family. 


Box 5.1 First and Second Stories 

The First Story represents how people, with knowledge of the outcome and 
the consequences for victims and organisations, first respond to breakdowns 
in systems that they depend on. This is a social and political process which 
generally tells us little about the factors that influenced human performance 
before the event. 

First Stories are overly simplified accounts of the apparent cause of the 
undesired outcome. The hindsight bias narrows and distorts our view of prac- 
tice after-the-fact. As a result, there is premature closure on the set of con- 
tributors that lead to failure. 

When we start to pursue the Second Story our attention is directed to peo- 
ple working at the sharp end of the healthcare system and how human, organ- 
isational, technological and economic factors play out to create outcomes. We 
need to understand the pressures and dilemmas that drive human performance 
and how people and organizations actively work to overcome hazards 
(Adapted from Woods and Cook 2002) 


We previously extended Reason’s model and adapted it for use in healthcare, 
classifying the error producing conditions and organizational factors in a single 
broad framework of factors affecting clinical practice (Vincent et al. 1998; Vincent 
2003). The ‘seven levels of safety’ framework describes the contributory factors and 
influences on safety under seven broad headings: patient factors, task factors, indi- 
vidual staff factors, team factors, working conditions, organisational factors and the 
wider institutional context (Table 5.1). 

This gave rise to a method of incident analysis published in 2000, often referred 
to as ALARM, because it was produced with colleagues from the Association of 
Litigation and Risk Management (Vincent et al. 2000). The ALARM approach was 
primarily aimed at the acute medical sector. A later revision and extension in 2004, 
known as the ‘London Protocol’, has been translated into several languages and can 
be applied to all areas of healthcare including the acute sector, mental health, and 
primary care. The method of analysis is known by different names in different coun- 
tries, with some continuing to use ALARM and other referring to the London pro- 
tocol. We use the term ALARM/LONDON to describe the essential elements of the 
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Table 5.1 The ALARM/LONDON framework of contributory factors 


Factor types Examples of contributory factors 

Patient factors Complexity and seriousness of conditions 
Language and communication 
Personality and social factors 

Task and technology factors Design and clarity of tasks 
Availability and use of protocols 
Availability and accuracy of test results 
Decision-making aids 

Individual (staff) factors Attitude, knowledge and skills 
Competence 
Physical and mental health 

Team factors Verbal communication 
Written communication 
Supervision and seeking help 


Team structure (congruence, consistency, 
leadership) 


Work environmental factors Staffing levels and skills mix 
Workload and shift patterns 
Design, availability and maintenance of equipment 
Administrative and managerial support 
Physical environment 

Organisational and management factors | Financial resources and constraints 
Organisational structure 
Policy, standards and goals 
Safety culture and priorities 

Institutional context factors Economic and regulatory context 
Wider health service environment 
Links with external organisations 


previous versions, which is clumsy but avoids confusion. We also propose a new 
extended model, which we have christened ALARME to indicate the new European 
flavour that has been infused. 

The approach developed by James Reason and others has been enormously fruit- 
ful and has greatly expanded our understanding of both the causes and prevention of 
harm. The question for us now is whether this perspective needs to be adapted or 
extended in the light of our previous arguments. The current model has been found 
to be effective in many different clinical settings but is primarily aimed at the analy- 
sis of relatively discrete events; it may need some revision if we are to also examine 
serious failures and harm that evolves over months or even years. We may need to 
broaden our approach to the investigation and analysis of incidents in a number of 
ways. 
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Essential Concepts of ALARME 


The ALARM/LONDON approach set out a methodology and structured approach 
to reflection on the many factors that may contribute to an incident. During an inves- 
tigation information is gleaned from a variety of sources: Case records, statements 
and other relevant documentation are reviewed and interviews are carried out with 
staff and ideally with the patient and family. Once the chronology of events is clear 
there are three main considerations: the care delivery problems identified within the 
chronology, the clinical context for each of them and the factors contributing to the 
occurrence of the care delivery problems. The key questions are: What happened? 
(the outcome and chronology); How did it happen? (the care delivery problems) and 
Why did it happen? (the contributory factors) (Vincent et al. 2000). 
In the context of this book there are four new issues to be considered: 


e First, we need to look at a broader class of events which impact on the patient. 
Some events for analysis need to be selected from the patient’s point of view in 
addition to those identified by professionals. 

e Second, we need to extend the analysis to examine an episode in the patient 
journey rather than a single incident. The timeframe is widened to include the 
whole ‘event journey’. ALARME proposes an extended approach that applies 
the classic grid of contributory factors to each of the identified care delivery 
problems in the unfolding story of the “emerging harm’ considered for initial 
analysis 

e Third, we need to pay more attention to both successes and failures of detection, 
anticipation and recovery. We need to consider not only problems but also suc- 
cess, detection and recovery and how they combine to produce the overall ratio 
of benefit and harm for the patient. This in turn affects the nature of the learning 
and the subsequent safety interventions that we might recommend 

e Fourth, we potentially have to adapt both methods of analysis and recommenda- 
tions to the different contexts and models of safety 


Our expanded process of investigation maintains the basic approach of ALARM/ 
LONDON and the original table of contributory factors, but extends the time frame 
and includes analysis and reflection on success, detection and recovery (Fig. 5.1 and 
Table 5.2). The changes we propose would require significant research and invest- 
ment in the development of new methods but we believe this is essential if safety is 
to be effectively managed across clinical contexts. 


Select Problems for Analysis Which Are Important to Patients 


We already know that patients and families are able to reliably identify adverse 
events that have not been detected by professionals. Patients have been shown in a 
number of studies to report errors and adverse events accurately and to provide 
additional information not available to healthcare professionals. Many 
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Fig.5.1 Analysis of safety along the patient journey 


patient-identified events are not captured by the hospital incident reporting system 
or recorded in the medical record (Weingart et al. 2005; Weissman et al. 2008). 
Findings from several patient surveys suggest that patients report a much higher rate 
of errors and adverse events of some kind than the published rates based on hospital 
record review (King et al. 2010; Lehmann et al. 2010). There is therefore already a 
case for selecting some patient identified incidents for analysis even in hospitals; 
outside hospitals where patients and carers probably have the most comprehensive 
picture of care, the argument is stronger still. 

We suggest that events considered for analysis should be selected from the 
patient’s point of view as well as by professionals. Tragedies of course deserve full 
and comprehensive investigation, but insights into safety may emerge from many 
types of event. We do not yet know what other kind of events might be identified as 
worthy of investigation by patients and families. What makes an event ‘abnormal’, 
and therefore a potential candidate for analysis, is a complex matter of surprise, rar- 
ity, intensity, severity and perhaps also the a basic feeling of the injustice of being 
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Table 5.2 New features of ALARME 
ALARM/LONDON 


Identification and decision to 
investigate 


Select people for investigation team 


Organisation and data gathering 


Determine accident chronology 


Identify Care Delivery Problems 
(CDPs) 


Identify contributory factors 


Support for patients, families and 
staff not explicitly considered 
Recommendations and developing an 
action plan 
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ALARME 


Ask patients to tell their story of the episode of care, 
focusing both on what went well and poorly; select 
some of these cases for analysis 


Include patient and family where possible 


Ask patients and family to tell their story and reflect on 
contributory factors 


Widen the timeframe to the whole patient journey 


Identify benefits of care as well as problems, and 
include detection and recovery from problems 
Identify contributory factors to each individual 
problem and to detection and recovery 

Reflect and comment on disclosure process and 
support for patients, families and staff 


Select from the full portfolio of strategies and 
interventions 


injured in a place of safety. The events identified by patients and families may be 
quite different from those identified by professionals. 

Future reporting systems which seek to involve patients and families will need a 
balance of open-ended narratives and closed-ended questions for cause analysis and 
classification (King et al. 2010). Primary care patient reporting studies have used a 
combination of methods such as written, online or telephone reporting and tele- 
phone recruitment with a follow up in-person interview. Interviewing patients in 
person is particularly effective when following up hospital patients; the highest 
response rate overall in published studies is 96 %, achieved by in-person patient 
advocate interviews for a specific hospital unit. However, there are still many barri- 
ers to the use of patient derived information, particularly a lack of support for the 
values of patient centred care, and consequent risk of low value attached to patient 
involvement (Davies and Cleary 2005). 


Widen the Time Frame of Analysis: Review the Patient Journey 


Many serious events occur because of multiple small failures in the care of a patient 
rather than any single, dramatic failure. Sometimes these individual failures com- 
bine at a single time when, for instance, a young doctor is unsupervised at night with 
inadequate equipment, a difficult team and a very sick patient. More often though, 
in the care of a patient over time, we see a progressive degradation in care due to a 
combination of errors and system vulnerabilities and sometimes neglect. Advances 
in patient safety are severely hampered by the narrow timeframe used in incident 
detection and analysis. 

We already understand that after an incident we need to look back to the series of 
events that led up to the problem and which are directly or indirectly linked to it. 
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Amalberti and colleagues (2011) have previously argued that we should extent the 
time frame of analysis to consider an ‘event journey’ (Amalberti et al. 2011). 
However to examine safety over longer time periods, particularly in community set- 
tings, we now believe that we should speak simply of the patient journey. This 
means looking back through the medical history of the patient in search for all 
events that have defined the patient’s journey and contributed to the final outcome, 
whether or not these events have been perceived as serious at the time they occurred 
and assessing whether the problem was detected and resolved. Most important of 
all, the event would ideally be examined through the eyes of the patient and family 
as well as the eyes of the professionals. 

The selection of the time frame of the analysis depends on the conditions suffered 
by the patient, the nature of the problems identified and the complexity of the patient 
journey. Standard episodes of care are easily identified; a hip replacement for instance 
could cover the period between the initial decision to operate and the completion of 
the rehabilitation process. Alternatively, depending on the nature of the safety issues 
identified, one might focus on a particular period such as from the original operation 
through to rehabilitation at home. The most important development is to begin by 
examining a period of care rather than a specific incident and its antecedents. 
Consider three different timeframes to detect and analyse events associated with the 
occurrence of complications. The shortest timeframe (A) would cover simple prob- 
lems relating to the direct coupling between a wrong action and the immediate con- 
sequence to the patient (such as mistaken identification). A somewhat longer 
timeframe (B) would cover the events leading up to a medical complications and its 
subsequent management which might encompass an entire acute care episode from 
initial admission, to discharge and rehabilitation. The longest timeframe (C) might 
cover several months leading up to an avoidable hospital admission, the time spent in 
hospital and subsequent recovery. In-hospital and short-term (30- or 60-day) post- 
discharge mortality might be used as a starting point to investigate opportunity tar- 
gets, avoidable mortality, and other indicators for complications. 

The original ALARM/LONDON protocol proposed that, after the initial care 
delivery problems were identified, each should be analysed separately to consider 
the contributory factors (Vincent et al. 2000). In a sequence of problems different 
sets of contributory factors may be associated with each specific problem. For 
instance a young nurse or doctor might fail to ask for advice about a deteriorating 
patient due to inexperience, poor supervision and deficiencies in teamwork; in con- 
trast the same patient might later fail to receive the correct medication, but this 
might be due to inadequate staffing and poor organisation of care. In practice the 
full analysis is seldom done and all the contributory factors are considered together 
as if all were relevant to the single event. However, this more subtle perspective 
becomes much more important with a longer timescale as a series of problems may 
be identified which are clearly separated in time and context. Each of these can be 
separately analysed using the ALARM grid to build up a much more detailed pic- 
ture of system vulnerabilities. 

Figure 5.2, describing the causes and response to an adverse drug event, pro- 
vides an example of the new approach. The example shows the triple value of 
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A case analysed with ALARME 


The story as seen 
by professionals 


Mrs X, 58, is sent to the hospital 
by her GP for a hallux - valgus 
surgery. For many years she has 
taken metfomine 1000 mg twice 
daily to control her diabetes . 


The surgery went well. In the 
recovery room the anaesthetist 
prescribed: thromboprophylaxis, 
painkillers, capillary draw test for 
blood glucose monitoring, and 
added ‘resume personal treatment 
at night’. These instructions were 
followed but incompletely recorded 
in the medical notes. 


The blood glucose levels fell 
progressively from 1.2 to 0.8 on 
the evening of day 3 without 
concerning the nurses (below 0.7 
was the accepted value to alert 
doctors). 


She was scheduled for discharge 
on day 4, but she felt ill at 5 am 
that day, and rapidly fell into a 
coma. 


She was transferred to ICU and 
diagnosed with very serious 
diabetic ketoacidosis. When 
reviewing her medication is 
became clear that she had taken 
metformine x 6 for 3 days. 


She recovered 4 days later from 
ICU, and was discharged home 
on day 13, 9 days after her 
expected discharge date. 


The story as told 
by the patient 


Mrs X. saw the Anaesthesiologist 2 
weeks before surgery. He said that 
she should come to the hospital 
with a fresh doctor's prescription 
from her GP, because she only had 
a loosely crumpled paper. 


She saw her GP the day before 
surgery without an appointment. 
The GP saw her in the corridoor 
and rapidly wrote a fresh 
prescription. Under pressure the 
GP mistakenly wrote metformine 
1000 mg x2 x3. 


Mrs X did not realise she was also 
being prescribed metformine on the 
ward since the pills given by the 
staff were different (generic) and 
nobody told her what drugs she 
was being given. 


Her family reported that she felt ill 
on day 2, becoming tired and 
irritable at day 3. The nurse said it 
was normal after surgery, gave her 
a sedative and suggested resting. 


The hospital staff never explained 
why she became so ill saying only 
that her diabetes had 
decompensated because of the 
surgery and a reaction to 
metformine. Only the GP 
apologised 2 weeks later. 


She still gets very anxious about 
her diabetes. It took 6 months after 
discharge to recover her well-being. 
She now has to see an 
endocrinologist every three months 
for a period of 2 years. 


Fig.5.2 A case analysed with ALARME 
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ALARME: first gathering the story of the event journey from the patient’s per- 
spective to give a more complete account; second, widening the scope of the anal- 
ysis to the full patient journey to include pre-admission and events after discharge 
from hospital; third identifying and analysing other usually disregarded events to 
reveal the cumulative impact of poor care, initial deterioration and eventual 
recovery. 

This broader approach will require a new type of meeting (probably video 
conference) covering longer periods in the patient’s medical history and involving 
the participation of both hospital and community practitioners. It would also 
require the development of new indicators and electronic traces, such as tools to 
monitor individual patients’ lab results, to record the nature and duration of all 
breakdowns in the continuum of care. A full picture would require tracking the 
treatment of all the disorders from which the patient suffered not just single 
diseases. 
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Success and Failure in Detection and Recovery 


In most systems errors are relatively frequent but few impact on safety because of 
the capacity of humans and organisations to recover from errors. In aviation, for 
example, numerous studies show that professional pilots make at least one clear 
error per hour, whatever the circumstances and the quality of the workplace design 
(Helmreich 2000; Amalberti 2001). The great majority of errors made are rapidly 
detected by the person who made them, with routine errors being better detected 
than mistakes. Experts of course make fewer errors overall than novices but the best 
marker of high level expertise is the detection of error rather than its production. 
Success in detection of errors is the true marker of expertise, while error production 
is not. Detection and recovery are sensitive to high workload, task interruptions, and 
system time management (Amalberti et al. 2011; Degos et al. 2009). 

What are the implications for safety and for the analysis of incidents? We com- 
monly assume that the best way to make a system safer is to reduce the number of 
errors and failures. This is, in many cases, entirely reasonable. Automation for 
instance, or reminder systems, can have a massive impact on minor errors. A more 
organized handover process might enhance the transfer of essential information. 
However eliminating all errors, which would mean considerably restricting human 
behaviour, is not possible and arguably not desirable. 

We need in practice to distinguish errors that have immediate consequences for 
the patient and those which can be considered as minor deviations in the work pro- 
cess which can be noticed and corrected. The first class of errors do indeed need 
formal, rigorous rules to protect the patient, such as clear protocols for the manage- 
ment of electrolytes or multiple and redundant patient identification checks. For the 
many millions of other minor errors it is more efficient and effective to rely on 
detection and recovery by means of self-awareness and good coordination and com- 
munication within the team. These findings also suggest that reliable human-system 
interaction will be best achieved by designing interfaces that minimize the potential 
for control interference and support recovery from errors. In other words, the focus 
should be on control of the effect of errors rather than on the elimination of error per 
se (Rasmussen and Vicente 1989). 

The standard approach for incident analysis in healthcare has primarily focused 
on identifying the causes and contributory factors of the event, with the idea that this 
will allow us to intervene to remove these problems and improve safety. These strat- 
egies make perfect sense in any system which is either highly standardised or at 
least reasonably well controlled, since there it is clearly possible to implement 
changes that address these vulnerabilities. The recommendations from many analy- 
ses of healthcare incidents are essentially recommendations to improve reliability 
(such as more training or more procedures) or to address the wider contributory 
factors such as poor communication or inadequate working conditions. In all cases 
we attempt, quite reasonably, to make the system more reliable and hence safer. 

We could however expand the scope of the inquiry and the analysis. There is much 
to learn from the ability of the system to detect and recover from failures and close calls 
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(Wu 2011). For example, in addition to identifying failures and contributory factors we 
could instead ask ‘what failures of recovery occurred in the care of this patient?’ and 
‘how we can we improve detection and recovery in settings such as these?’ This would 
have implications both for our understanding of events and, more importantly, for the 
recommendations which follow such analyses which might expand to include a much 
stronger focus on developing detection and recovery strategies. 


Adapting the Analysis to Context 


In addition to the developments described above we believe that we may also have to 
extend our thinking by adapting methods of analysis to the different contexts and 
models of safety we have outlined. We should be clear at this point that we do not, as 
yet, know how to do this. Many authors, particularly Erik Hollnagel, have drawn 
attention to the need for a wider array of accident models which are better adapted to 
fluid and dynamic environments (Hollnagel 2014). However we do not as yet have 
sufficient understanding to match models to environments and we have certainly not 
developed practical methods of analysis which are customized to different contexts. 

We can however begin to consider what such an analysis might look like. Suppose 
we analyse an accident in a very risky unstructured environment — this might be 
deep sea fishing or an incident that occurred in home care involving someone with 
serious mental health problems. Are we looking for the same kind of causes and 
contributory factors as we are in a much more structured environment? The factors 
might be different and also the balance of factors might be different. For instance 
the framework of contributory factors (Vincent et al. 1998) identifies patient factors 
as a potential contributor to an incident. In a highly standardized environment, such 
as radiotherapy department, personal characteristics play a much less important role 
than in situations in which a person is responsible for their own care. People with 
serious mental health or cognitive problems are also clearly at higher risk of making 
drug errors in their own care. So, the relevance and influence of different types of 
contributory factors should be different in different contexts. This has, as far as we 
know, not been addressed empirically but should be entirely feasible. The next step 
is to ask if we should, in different contexts, be identifying different kinds of recom- 
mendations depending on the clinical context. This in turn depends on how one 
believes safety is achieved and realised in different settings. However before we can 
fully consider this issue we need to set out our proposals for a strategic approach to 
safety interventions addressed in the following chapters. 


Adapting the Analysis to Context 


Key Points 


Every high risk industry devotes considerable time and resource to investi- 
gating and analysing accidents, incidents and close calls. 

Effective incident analysis requires a framework which includes guidance 
on the selection of incidents, and how the investigation and analysis should 
be conducted. 

Our current framework (known both as ALARM and London Protocol) for 
incident analysis in medicine: (i) identifies events for analysis chosen by 
professionals (ii) is based on an underlying safety model examining causes 
and contributory factors and (iii) uses the ‘seven levels of safety’ frame- 
work to guide the identification of contributory factors and potential 
interventions. 

The current framework remains relevant, but needs to be significantly 
adapted to reflect the new safety challenges. 

We need to include events that reflect harm in the eyes of patients who may 
identify problems that are not necessarily seen by professionals. 

We need to develop an approach which reflects the importance of poor care 
evolving over time, which in turn affects the nature of the learning and 
subsequent safety strategies that we implement. 

We propose a new approach to incident analysis (ALARME) which con- 
siders contributory factors along the whole patient journey and which 
includes attention to successes, failures, recovery and mitigation. 

This new approach to incident analysis involves the participation of the 
patient and family and both hospital and community practitioners. It may 
require the inclusion of new information such as the patient’s personal 
story of illness and individual laboratory results over time. 

The changes we propose would require significant research and investment 
in the development of new methods but we believe this is essential if safety 
is to be effectively managed across clinical contexts. 
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Imagine that you are the leader of a healthcare unit or organisation. You are con- 
cerned about safety but you have (as always) limited time and resources. You plan a 
programme lasting | year initially and perhaps extending to 5 years. 


e What should you do to improve safety? 
e What safety strategies are available to you? 
e How can these strategies be most effectively combined? 


You might first review safety standards in your organisation and the evidence for 
safety improvement. From this you would probably conclude, as we have argued 
earlier, that there are many lapses from basic standards and that the most critical 
task is to improve adherence to basic safety critical procedures. This is of course 
easier said than done but it is the basis of most healthcare safety interventions 
whether this is reducing infection, improving risk assessment, avoiding wrong site 
surgery or improving medication safety. By this point in the book however you will 
have realised the near impossibility of always providing optimal care which corre- 
sponds with standards in many, if not most, settings in healthcare. Adherence to 
standards provides an essential foundation but not a complete vision. We may have 
to think a little more broadly. 


What Options Do We Have for Improving Safety? 


We should be wary of modelling all future safety interventions on our most visible 
successes. In some highly standardised areas, such as radiotherapy or management 
of blood products, a combination of automation and highly standardised procedures 
combine to deliver genuinely ultra-safe systems. However, at the other extreme, 
consider the care of a patient with psychosis in the community. We cannot, and 
should not, enforce standards and procedures in care that patients and families pro- 
vide. The management of risk in such a setting clearly requires a different approach 
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based more on anticipation and detection of incipient problems and a rapid response. 
We have to accept and value greater autonomy and, with this greater freedom, 
comes greater risk. This means that safety strategies need to rely less on rules and 
standards and more on the detection of problems and a rapid response to them. 

In the remainder of this chapter we outline the main strategies for improving safety 
in healthcare that can be used by our imaginary clinical leader or manager. Our hope is 
that providing a high level architecture of safety strategies will support frontline leaders 
and organisations in devising an effective safety programme. Rather than adopting 
piecemeal solutions we believe that we need to first articulate a high level vision of 
what strategies are available and how they might be employed in each setting. As we 
will see some strategies are most useful in highly standardised areas of work while oth- 
ers come to the fore in more fluid and dynamic environments. None of them in isolation 
necessarily provide a high level of patient safety. The aim is to find a blend of strategies 
and interventions appropriate to the context and the organisation. 


Five Safety Strategies 


We outline five broad strategies (Box 6.1) each of which is associated with a family 
of interventions. The strategies are, we believe, applicable at all levels of the health- 
care system from the frontline to regulation and governance of the system. Two of 
the strategies we discuss aim to optimise the care provided to the patient. The other 
approaches are focused on the management of risk and the avoidance of harm. 


Box 6.1 Five Safety Strategies 

Safety as best practice: aspire to standards — Reducing specific harms and 
improving clinical processes 

Improving healthcare processes and system — Intervening to support indi- 
viduals and teams, improve working conditions and organisational 
practices 

Risk control — Placing restrictions on performance, demand or working 
conditions 

Improving capacity for monitoring, adaptation and response. 

Mitigation — Planning for potential harm and recovery. 


The first two strategies approaches aim, broadly speaking, to achieve safety by 
optimising care for the patient. In a sense safety and quality and equated; the aim is 
to provide care at levels 1 and 2. Within this general approach we distinguish focal 
safety programmes aimed at specific harms or specific clinical processes (Safety as 
best practice) and more general attempts to improve work systems and processes 
across a number of clinical settings (Improving the system). These approaches are 
well described in the patient safety literature and we will only briefly summarise the 
main features here as our primary purpose is to draw attention to other important 
and complementary approaches. 
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Optimisation of processes and systems is indeed optimal if it can be made to 
work. The difficulty is that in the real world optimal care is usually not achievable 
for at least some of the time. Once there is evidence of a substantial departure from 
best practice then the question becomes how best to manage those departures and 
the associated risk. The remaining three approaches are risk management strategies: 
risk control; monitoring, adaptation and response; and mitigation. Optimisation 
strategies improve efficiency and other aspects of quality as much as they improve 
safety. In contrast risk control, adaptation and recovery strategies are most con- 
cerned with improving safety. 

Safety problems are also sometimes resolved because of the introduction of a 
completely new way of investigating or treating an illness. The development and 
rapid adoption of laparoscopic surgery for instance means that patients no longer 
have large wounds from major incisions, are less vulnerable to infections and have 
a much shorter hospital stay. Reduction of infection is a major safety target but was 
here achieved indirectly by a major surgical innovation. While we recognise that 
innovation often improves safety we do not consider it as a safety strategy, in the 
sense of a plan that can be implemented relatively quickly, because major innova- 
tions usually occur over long time periods and can only be implemented once they 
have been tried and tested. 


Strategy I: Safety as Best Practice 


The most dramatic safety improvements so far demonstrated have been those with a 
strong focus on a core clinical issue or a specific clinical process. They may be 
focussed on the reduction of a specific form of harm, such as falls or central line infec- 
tions, or increasing the reliability of specific clinical processes such as pre-operative 
checks. We originally conceptualised this approach as ‘aspiring to standards’ as we 
regard basic standards and procedures as the foundation of safe systems, though we 
recognise that for an individual patient there is a great deal more to optimal care than 
achieving standards. In our terms ‘best practice’ suggests that a team or organisation 
aims and believes that they can provide care at levels 1 and 2 (Table 6.1) 

A recent review of the patient safety literature (Shekelle et al. 2011) found only 
ten interventions that could be currently recommended for implementation; almost 


Table 6.1 Safety as best practice: aspire to standards 


Interventions Examples 

Focal safety programme: reduction | Interventions to reduce central line infections 

of harm Inpatient falls reduction programmes 
Interventions to reduce urinary catheter use and infection 
Interventions to reduce pressure ulcers 

Improved reliability of targeted WHO Surgical safety and other checklists 

processes Medication reconciliation 


Care bundles for ventilator associated pneumonia 
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all of them would, in our terms, be described as focal safety interventions. The 
essential idea is that complying with proven evidence and standards will produce 
optimal quality and safety. Many patients come to harm because established, scien- 
tifically based standards of practice are not reliably followed. Safety interventions 
of this kind first marshal the scientific evidence, then identify the core practices and 
endeavour to reliably bring these practices to patient care. 


Box 6.2 Improving Safety by Achieving Best Clinical Practice 

e Explicitly describe the theory behind the chosen intervention or provide an 
explicit logic model for why this patient safety practice should work 

e Describe the patient safety practice in sufficient detail that it can be repli- 
cated, including the expected effect on staff roles 

e Detail the implementation process, the actual effects on staff roles, and 
how the implementation or intervention changed over time 

e Assess the effect of the patient safety practice on outcomes and possible 
unexpected effects, including data on costs when available 

e For studies with multiple intervention sites, assess the influence of context 
on the effectiveness of intervention and implementation 


Adapted from Shekelle et al. (2011) 


It sounds simple; one identifies a standard set of safety critical procedures and 
supports the staff to follow them. However, in practice these are always complex, 
multifaceted interventions encompassing techniques, organisation and leadership 
(Pronovost et al. 2008). These interventions are of course far from simple and only 
succeed because of a sophisticated approach to clinical engagement and implemen- 
tation (Box 6.2). The reduction of central line infections for instance required 
changes to the organisation of care, the equipment used, simplification of guide- 
lines, engaging local multidisciplinary teams, a staff education programme, techni- 
cal measurement support and a major programme of implementation. 


Strategy Il: Improvement of Work Processes and Systems 


Accident and incident analysis and other methods reveal a great deal about the vul- 
nerabilities in our systems and show us the range of factors which need to be 
addressed if we are to design a safer, high quality healthcare system. Thoughtful 
analyses of serious incidents reveal a range of contributory factors relating to the 
patient, task and technology, staff, team, working environment, organisational and 
institutional environmental factors (Vincent et al. 1998). This is the classic territory 
of the organisational accident in which immediate errors and failures are identified 
which are strongly influenced by wider organisational factors. These same factors 
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Table 6.2 Improvement of healthcare system and processes 


Interventions Examples 
Individual staff Training in key clinical processes 
Feedback on performance 
Task interventions Standardisation and simplification of processes 
Automation of key processes 
Improved design and availability of equipment 
Team standardisation and Structured handover 
specification Formalising roles and responsibilities 
Clarity of leadership and followership 
Organisation of ward care 
Working conditions Improved lighting 
Reduction of noise and disturbance 
Improved work station design 
Organisational interventions Improved levels and organisation of staffing 


Creation of new posts to improve coordination of care 
for patients 


also point to the means of intervention and different ways of optimising the health- 
care system. For instance Pascale Carayon’s systems engineering approach to 
patient safety emphasizes interactions between people and their environment that 
contribute to performance, safety and health, quality of working life, and the goods 
or services produced (Carayon et al. 2006) (Table 6.2) 

Examples of system improvements which have, amongst other objectives, had 
important impacts on safety include: 


e The introduction of bar coding and decision support in blood collection and 
transfusion (Murphy et al. 2009). 

e The improvement of communication and handover along the surgical pathway 
(de Vries et al. 2010) 

e Using information technology to reduce medication errors (Bates 2000; Avery 
et al. 2012) 

e The use of daily goals sheets to improve the reliability of ward care (Pronovost 
et al. 2003) 


The improvement of healthcare systems is a massive topic and there are count- 
less examples of analyses and, to a lesser extent, interventions that are within this 
tradition. We cannot describe these in detail and in any case they are extensively 
discussed elsewhere (Carayon 2011). Systems engineering, human factors and 
associated disciplines are not restricted to optimisation approaches in that risk 
control, monitoring, adaptation and recovery are sometimes considered. However 
we suggest that the primary drive and focus is optimisation of the healthcare 
system. 
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Strategy Ill: Risk Control 


The next strategy and associated family of interventions is quite different form the 
optimisation approaches discussed above. In many industries safety is achieved 
by avoiding taking unnecessary risks or placing restrictions on the conditions of 
operation. In contrast healthcare seldom imposes limits on either professional 
autonomy or productivity even when safety is severely compromised. Risk con- 
trol may seem to provide the answer to all risks, but avoiding risk sometimes 
means losing out on the potential gain that taking the risk may have allowed. 
Increasing risk regulation in hospitals can lead to avoidance of treating higher risk 
conditions, in favour of patients presenting with lower risk (McGivern and Fischer 
2012). Avoidance of risk is not necessarily a good option for patients either as 
there are many circumstances in which clear-sightedly making a risky choice is 
entirely reasonable. However risk control does not aim to prevent a considered, if 
risky, decision but to improve the chances of a good outcome once the decision 
has been taken. 

Risk control is widely used in other high-risk industries. The safety systems in 
nuclear and other facilities include numerous features which will stop the process if 
conditions become potentially unsafe. Commercial aviation uses a similar approach 
in many circumstances. For example, a storm in Miami will result in all flights to 
Miami grounded at their departure airport or diverted to others airports. Safety 
cases, the process by which potential oil and other installations are assessed, are 
almost unknown in healthcare. New clinical facilities are opened, or indeed closed, 
largely on grounds of need and cost without any formal risk assessments. Safety 
cases are designed to offer formal assurance and assessment that the facility can be 
run safely but also set out the conditions under which this can occur and building in 
procedures or automation to restrict activity when necessary. These are all examples 
of risk control by placing limits or restrictions on productive activity in the interests 
of safety (Table 6.3). 


Table 6.3 Risk control 


Interventions Examples 

Withdraw services Close facilities if evidence of serious safety concerns 
Close facilities temporarily while safety assessments are 
carried out 

Reduce demand Reduce overall demand 


Reduce patient flow either temporarily or permanently 
Place restrictions on services Restrict services either temporarily or permanently 
Place restrictions on individuals | Define ‘no-go’ conditions for investigations and treatments 
or conditions of operation Withdraw or restrict individual members of staff either 
temporarily or permanently 
Prioritisation Select and emphasise safety critical standards while 
allowing some reduction of other work, either temporarily 
or permanently 
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Healthcare does contain examples of risk control but these are seldom discussed 
in the context of patient safety. For instance in 2013 the medical director of the 
British NHS decided to temporarily close a major cardiac surgery unit because there 
were indications of excess mortality. He made it clear that this was just a precaution. 
After a few weeks, following further investigations, the unit reopened. This was 
seen as a very unusual intervention which caused considerable uproar. Yet, in avia- 
tion, airports are closed as soon as any substantial risk is identified. 

Risk control can also be achieved by severely limiting the circumstances in which 
a unit can operate. Consider, for example, the way that the Australian healthcare sys- 
tem places very strict limits of what some clinics are allowed to do (New South Wales 
Government Private Facilities 2007). Some clinics are only authorised to work in a 
very specific medical area, and are staffed and equipped accordingly. Within this area, 
the facility must accept patients and deliver safe care; outside this area, the facility is 
not allowed to deliver care and must transfer all patients to a competent facility. 

Risk control can include withdrawing services or even closing facilities when 
they have become dangerous. However the main thrust of this approach is to restrict 
the conditions in which investigations or treatment can be given. There are, for 
instance, very strict regulations governing the provision of radiotherapy but almost 
no restrictions on the conditions in which a surgical operation can go ahead. We 
believe that much more consideration should be given to the control of risk to pro- 
tect both patients and staff from engaging in unnecessarily risky activities. 
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Safety is achieved partly by attempting to reduce errors but also by actively manag- 
ing the problems and deviations that inevitably occur. Once we accept that errors 
and failures occur frequently in any system then we see the need to develop methods 
of monitoring, adapting and responding and recovering from failure. Adapting and 
responding to problems happens all the time in healthcare and is as relevant to man- 
agers as to frontline staff. Managers in particularly are constantly ‘firefighting’ and 
resolving problems, but this tends to be done on an ad hoc individual basis. The 
question we address here is whether these often improvised adaptations can evolve 
to become formal safety strategies in the sense of actively building such capacity 
into healthcare systems. Ideally senior clinicians and managers would maintain 
safety at a good level by playing on a palette of known and practiced organisational 
and cultural adjustments. 

Adapting and responding is much more important in deep sea fishing than on an 
assembly line but all work requires this capacity to some degree. Being on the look- 
out for problems, adapting and working around difficulties is part and parcel of all 
jobs. In high risk industries such as healthcare the pattern is the same but the stakes 
are much higher and the capacity for rapid response and recovery may literally be a 
matter of life and death. This family of interventions is paradoxically the most used 
in daily work in healthcare but not properly developed as a strategic reality in patient 
safety. 


66 6 Strategies for Safety 


The broad capacity of adapting and responding has been discussed extensively in 
the safety literature and made the cornerstone of some approaches to safety such as 
resilience engineering (Hollnagel et al. 2007). The term resilience is used in very 
different ways (Macrae 2014), sometimes very broadly in an attempt to describe and 
articulate the qualities of a safe organisation and sometimes in a more restricted 
sense of a capacity to adapt and recover from extreme or unusual circumstances. We 
believe that resilience is an important concept that needs serious consideration and 
further research and exploration in practice. However to avoid potential confusion 
we use the more everyday terms of monitoring, adaptation and recovery to denote 
occasions where or hazards or failures have been detected and are being actively 
managed or corrected. 

We will describe a number of interventions associated with this approach in the 
following chapters and will just give some brief examples here (Table 6.4). An 
emphasis on the open discussion of error and system failures by senior leaders is 
enormously important in fostering a willingness to speak up and intervene if a 
patient is at risk. Clinical teams use many adaptive mechanisms, both formal and 
informal, to manage safety on a day to day basis. Anaesthetists for instance have a 
standard repertoire of prepared emergency routines which are called upon in certain 
situations. These routines are only seldom used and are deliberately honed and stan- 
dardised so that they can be adhered to at times of considerable stress. At an organ- 
isational level we could see preparations for a possible infection outbreak in a 
similar way (Zingg et al. 2015). Briefings and debriefings can be used by ward staff, 
operating theatre teams and healthcare managers to monitor day to day threats to 
safety. For example, briefings carried out by operating theatre teams provide an 
opportunity to identify and resolve equipment, staffing, theatre list order issues 
before a case starts. Debriefings carried out at the end of the theatre list support 
reflective learning on what went well and what could be done better tomorrow. 


Table 6.4 Improve capacity for monitoring, adaptation and response 


Interventions Examples 
Improve safety culture Patient and family engagement 


Culture of openness about error and failure 


Monitoring, adaptation and response in Rapid response to deterioration 
clinical teams Develop emergency response systems and 
routines 


Develop team cross checking and safety 


monitoring 
Building briefing and anticipation into clinical 
routines 
Improve management of organisational Develop methods of predicting times of staff 
pressures and priorities shortage and other pressures 


Improve managerial capacity to deal with 
dangerous situations 


Regulatory compromises and adaptation Negotiate time to move to new standards 


Actively manage safety during time of transition 
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Increasingly, briefings and debriefings are being introduced in other healthcare 
domains such as safeguarding adults and mental health teams (Vincent et al. 2013). 


Strategy V: Mitigation 


Mitigation is the action of reducing the severity, seriousness, or painfulness of some 
event. This strategy accepts that patients and indeed staff will sometimes be seri- 
ously affected or harmed during their healthcare and, critically, that the organisation 
concerned then has a responsibility to mitigate that harm. In particular we believe 
that organisations need to have effective systems in place to support patients, carers 
and staff in the aftermath of serious failures and harm. This is perhaps the most 
neglected aspect of patient safety (Table 6.5). 

Accepting risk in healthcare seems at first glance to either be an admission of 
defeat or a cynical disregard for patients. However this strategy is rather more subtle 
and more important than one might think both at the clinical and organisational 
level. Planning for these occasions can seem to indicate a resigned acceptance of 
harm; in reality planning for recovery is humanitarian and necessary. A complete 
approach to safety must include the mitigation of harm, although managing com- 
plaints and litigation should not dominate attempts to improve safety. 

Organisations of all kinds must insure against risk, deal with complaints and liti- 
gation, and manage the media and regulatory response Organisations must also 
make insurance arrangements for compensation to injured patients. At a national 
level countries develop medical insurance systems, such as no-fault compensation, 
to support patients who have been harmed. In most countries, the challenge of 
addressing error in medicine demands a thorough reconsideration of the legal mech- 
anisms currently used to deal with error and harm in health care. 

The basic needs of injured patients have been understood for 20 years (Vincent 
et al. 1994). We would all, in varying degrees, like an apology, an explanation, to 
know that steps had been taken to prevent recurrence and potentially financial and 


Table 6.5 Mitigation 


Interventions Examples 
Support for patients and carers Rapid response and clear communication 
Designated follow up, psychological and physical support 


Plan clinical services for response to known 
complications 


Support for staff Peer to peer support programmes 
Temporary relief from clinical duties 


Provision of longer term support 


Financial, legal and media Insurance of organisation 
response Legal protection for organisation against unwarranted 
claims 


Capacity for rapid and proactive media response 
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practical assistance. Many patients experience errors during their treatment, whether 
they realise it or not, and some are harmed by healthcare. The harm may be minor, 
involving only inconvenience or discomfort, but can involve serious disability or 
death. Almost all bad outcomes will have some psychological consequences for 
both patients and staff, ranging from minor worry and distress through to depression 
and even despair. The experiences of these people tend not to be fully appreciated, 
and yet understanding the impact of such injuries is a prerequisite of providing use- 
ful and effective help (Vincent 2010). Healthcare organisations generally have 
extremely limited services to support either patients or staff in the aftermath of 
adverse events. 

We know too that staff suffer a variety of consequences from being the ‘second 
victim’ as Albert Wu eloquently expressed it, not implying that the experiences of 
staff were necessarily comparable to those of injured patients (Wu 2000). We should 
also consider that a member of staff who has been seriously affected may well be 
performing poorly and be a risk to future patients; this again is rarely addressed. 
There are a few pioneering examples of programmes of support for both patients 
and staff (Van Pelt 2008) but this is an area of safety management which needs 
substantial development. We consider that this should be a core safety strategy; 
planning for recovery should include this core humanitarian element as well as 
managing risk and reputation. 


Innovation 


Safety problems are sometimes resolved because of the introduction of a com- 
pletely new way of investigating or treating an illness or a new way of providing 
and organising care. Innovation in healthcare can take many forms, ranging from 
drug therapies, surgical procedures, devices, and tests, through to new forms of 
health professional training, patient education, management, financing and service 
delivery models. These innovations generally aim to provide better or more effi- 
cient care for patients, but safety may also be improved as a virtuous side effect of 
the action 

Healthcare is remarkable in the breadth and pace of innovation which both 
improves safety and, as we have argued earlier, also changes the boundaries of what 
is acceptable and so creates new safety problems. The pace of innovation is such 
that medical knowledge dates extremely rapidly. In 2007, the median time before 
medical knowledge needed significant updating was only 5 years; 23 % of system- 
atic reviews needed updating within 2 years and 15 % within | year (Shojania et al. 
2007). According to both the United Kingdom National Institute of Clinical 
Excellence and the American Heart Association most recommendations and treat- 
ment guidelines need substantial adjustment every 5 years (Alderson et al. 2014; 
Neuman et al. 2014). 

Many innovations in diagnosis and treatment have had a major positive impact 
on safety. For example safety in anaesthesia has improved about ten-fold over the 
last past 20 years, with the consensus being that the greatest safety gains have arisen 
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from the introduction of new drugs and techniques for monitoring and for regional 
and ambulatory anaesthesia (Lanier 2006). The rapid introduction and spread of 
laparoscopic surgery has reduced length of stay, led to more rapid recovery and 
reduced risk of infection and other problems (Shabanzadeh and Sørensen 2012). 

Safety may also be improved indirectly through the reorganisation of the health- 
care system, particularly through realignment to a more patient centred vision. 
Many failures of care in community settings are due to failures of coordination and 
communication between agencies and across different parts of the system. One 
aspect of the ‘burden of treatment’ (Mair and May 2014) experienced by patients 
and families is that they have to organise and coordinate their own care to compen- 
sate for the failures of the healthcare system. If we succeed in developing more 
integrated systems of care across settings and populations these problems should 
reduce. Patients will be safer and experience fewer failures although the changes are 
not specifically targeted at safety. 

Innovation is not really a safety strategy, although safety interventions may be 
innovative. New treatments or technologies are usually targeted at wider benefits for 
patients with reduction of risk being a secondary benefit. More importantly in this 
context ‘innovation’ cannot be deployed as a strategy in the same way as optimisation, 
control and recovery. Our imaginary chief executive with a 3-5 year time horizon can- 
not rely on innovation to solve safety problems but must nevertheless to alert to new 
developments that may change the nature of the problems that they are facing. 

To sum up, innovation is a good example of a double-edged tool for safety. On 
the one hand, it is a critical determinant and means (perhaps the most significant) of 
improving safety in the long term. Innovation may also introduces new risks as well 
as resolving old ones particularly in the short term during the period of transition 
and disruption (Dixon-Woods et al. 2011). Safety may be degraded in the short term 
due to rapid diffusion of insufficiently tested new methods and uncontrolled indi- 
vidual experimentation. 


Selection and Customisation of Strategies to Clinical Context 


We hope that the delineation of the five strategies and their associated interventions 
is useful as a way of thinking through the approaches that might be taken to manage 
risk in any particular healthcare environment. These very broad strategies are sel- 
dom explicitly distinguished and some safety programmes unwittingly combine 
several types of strategy with somewhat different objectives. We believe that many 
situations do require a combination of different approaches but that it needs to be 
clear how and why each strategy is deployed (Fig. 6.1). We also need to consider 
how these strategies and associated interventions might be combined and in what 
proportions. Each clinical environment brings its own challenges and requires a dif- 
ferent combination. We have set out three broad models of clinical work to illustrate 
this and others may need to be articulated. The management of risk in the commu- 
nity for instance in highly distributed health and social care systems may require a 
different kind of approach. 
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The following chapters begin to explore these ideas in more detail by providing 
examples of safety strategies in different settings. We can however illustrate the 
general idea which is that after an initial stage of diagnosis of the safety problem, 
illustrated by our approach to safety measurement and monitoring, the ‘lens’ of the 
clinical context will inform the particular strategy blend (see Fig. 6.1). In settings 
where care can be precisely defined and delineated strategies to control exposure to 
risk and maintain standards will predominate, hopefully accompanied by concur- 
rent strategies to improve working conditions and support staff. In contrast in more 
fluid and dynamic environment strategies to improve monitoring and adaptation 
may be more to the fore, although all environments require a solid procedural under- 
pinning. The next three chapters develop and illustrate these ideas in the context of 
hospital, home and primary care. 


References 71 


Key Points 

e We outline a portfolio of five strategies for improving safety in healthcare 
each associated with a family of interventions: 

— Safety as best practice: Improving clinical processes and standards 

— Improving healthcare processes and system: Intervening to support 
individuals and teams, improve working conditions and organisational 
practices 

— Risk control: placing restrictions on performance, demand or working 
conditions 

— Improving capacity for monitoring, adaptation and response. 

— Mitigation: Planning for potential harm and recovery. 

e Safety problems are sometimes resolved because of the introduction of a 
completely new way of investigating or treating an illness. These innova- 
tions generally aim to provide better or more efficient care for patients, but 
safety may be improved as a virtuous side effect of the innovation. 

e In settings where care can be precisely delineated strategies to control 
exposure to risk and maintain standards will predominate. In contrast in 
more fluid and dynamic environment strategies to improve monitoring 
adaptation may be more to the fore, although all environments require a 
solid procedural underpinning. 

e Each clinical environment brings its own challenges and requires a differ- 
ent combination of strategies. The management of risk in the community 
for instance in highly distributed health and social care systems may 
require a different kind of approach. 
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We have developed a series of ideas and proposals in the book which together laid 
the foundations for five safety strategies described in Chap. 6. We believe that think- 
ing of safety strategies in this way has three major advantages: first, we can enlarge 
the range of safety strategies and interventions available to us; secondly we can 
customise the blend of strategies to different contexts and third the high level archi- 
tecture of safety strategies may help us think more strategically about safety both 
day to day and on a long term basis 

In this chapter we begin the process of exploring how these strategies might sup- 
port safety in the hospital. The following chapters address home care and primary 
care. In each case we provide a short introduction to relevant aspects of safety in 
each context but do not dwell on well-established findings. Our primary purpose is 
to provide examples of interventions associated with each of the five strategies and 
to give a sense of the potential value of such an approach. We recognise that, in the 
longer term, considerable further empirical work would be needed to develop and 
confirm (or discount) our proposals. 


A Little History 


Hospital care has been the main focus of patient safety for two decades now and we 
can distinguish a series of phases of exploration and intervention. Each phase 
brought some success but simultaneously revealed barriers and limitations, which in 
turn stimulated a new phase of work in an evolving trial and error strategy. With 
experience and maturity, we understand more today about what is achievable and 
what has proved illusory. We are much more aware of how difficult it is to improve 
safety in both the short and long term. 

What has been done in past decades? In the past 15 years we can distinguish 
three main phases each associated with different types of action and intervention. 
The earlier strategies have continued as the new ones emerged so that we now have 
‘a safety layer cake’ of practices and interventions. 
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The Enthusiasm of the Early Years, 1995-2002 


Systematic work on patient safety began in the mid 1990s with an emerging demarca- 
tion between a broad concern with quality and a specific focus on harm. In Britain for 
instance the development of clinical risk management, initially targeted at the reduc- 
tion of litigation, brought a new emphasis on the analysis and reduction of harmful 
incidents and events (Vincent 1995). The methods and assumptions however remained 
rooted in those of quality improvement; the aim was to identify and count errors and 
incidents and then find ways of preventing them. Establishing reporting systems to 
detect and record incidents was at the core of the strategy. This approach was rapidly 
reconsidered as a result of both massive under-reporting, especially from doctors, and 
a gradual realisation of the impossibility of resolving the growing number of problems 
identified in reporting systems (Stanhope et al. 1999). A wider vision was needed 
which was provided by systemic concepts and tools imported from industry. 


The Advent of Professionalism 2002-2005 


In the late 1990s, James Reason provided an inspirational vision for healthcare that 
provided a clear demarcation between traditional approaches to quality improvement 
and the specific problems that arise when addressing safety (Reason 1997; Reason 
et al. 2001). Safety researchers, clinicians and managers took the concepts, techniques 
and methods from industrial safety and applied them to healthcare. These included a 
stronger emphasis on the role of latent organisational conditions which led to the 
development of methods of incident analysis derived this model (Vincent et al. 1998, 
2000). Increasing attention was also given to human factors and ergonomics, follow- 
ing the success in improving interface and equipment design in industry, the use of 
information technology and a scientific approach to working conditions, stress and 
fatigue management (Bates 2000; Sexton et al. 2000; Carayon 2006). Accreditation 
and certification built on this new knowledge in requiring hospitals to establish risk 
management programmes and new patient safety indicators. Safety and risk manage- 
ment acquired a much higher profile and many new initiatives were developed across 
the healthcare system, but the impact on the safety of patients remained uncertain 
(Pronovost et al. 2006; Wachter 2010). The lack of clinical engagement was a major 
concern with patient safety remaining the province of enthusiasts and specialists — a 
curious situation given that safety, considered in terms of personal accountability, is 
perhaps the dominant concern of clinicians in their day-to-day work with patients. 


Safety Culture, Multifaceted Interventions, 
and Teamwork 2005-2011 


Surveys of safety culture demonstrated unequivocally that in many hospitals and 
other healthcare settings safety attitudes and values were far from ideal. Findings 
from many studies suggested an excessive blame culture, pressure on performance 
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to the detriment of safety, little transparency towards patients and variable levels of 
supervision and teamwork. There was also huge variability between hospitals, 
within clinical disciplines and across different settings (Tsai et al. 2013). Whereas 
safety culture was initially seen as potentially directly impacting on safety, there 
was now a growing awareness that it might provide only a necessary foundation 
(Flin et al. 2006; Vincent et al. 2010) 

However, as we have discussed, evidence began to emerge of marked improve- 
ments in specific safety problems at a local level and of the potential of wider applica- 
tion of approaches such as checklists, care bundles and so on (Haynes et al. 2009; 
Shekelle et al. 2011). Those proven safety wins on the frontline encouraged the 
healthcare community to believe that safety would progressively improve as more 
interventions were put into place. Improving safety across organisations and popula- 
tions however has proved a great deal more challenging. The major difference between 
current views and what was imagined in the mid 2000s is that safety wins and rewards 
are now expected in the middle to long term rather than in the very short term. 


Reflections on Safety in Hospitals 


We provide this brief overview primarily to highlight the fact that approaches to 
safety in hospitals have primarily been optimising approaches of one kind and 
another, although comparatively little attention has been given to optimising the 
system overall as opposed to improving specific practices. Accreditation and regu- 
lations of the system might be thought to be examples of risk control and there are 
certainly examples of standards being set in order to minimise or avoid risks of 
certain kinds. However we suggest that most accreditation and regulation is essen- 
tially aimed at assessing compliance or failure to comply with defined standards of 
care. Regulators are sometimes forced to acknowledge that standards cannot be met 
and that adaptations must be made but we suggest that the dominant vision of how 
safety is achieved is one of adherence to standards. 


Safety in Hospital: Distinguishing Current and Future 
Strategies 


We propose that thinking in terms of an overall blend of high level safety strategies 
customised to different contexts will be an efficient and effective approach both to 
managing safety on a day to day basis and to improving safety over the long term. 
However before we start to illustrate how the five different strategies might be 
employed in hospital we need to consider a critical issue, which is that staff and 
organisations often have to employ a particular strategy not because of the needs of 
that clinical environment but to compensate for other underlying problems in the 
system. For instance, services such as acute medicine rely very heavily on monitor- 
ing, adaptation and recovery to observe, correct and recover from the inevitable 
departures from best practice and unforeseen problems that arise. However the fact 
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that a strategy is extensively used does not necessarily mean that it is desirable; it 
might in fact be overused to compensate for other deficiencies such as poor reliabil- 
ity or inadequate staffing (Box 7.1). We therefore need to make a distinction at this 
point between: 


¢ The blend of strategies currently used by an organisation 
e The blend that might be desirable 
e The strategies that might need to be developed or enhanced 


Box 7.1. Adaptation and Compromise on the Wards 

Recently while on call at the weekend I found my team looking dispirited, 
ploughing through 27 pages of printed jobs that were required for patients 
based on ten wards. There was no way these could all be done by two junior 
doctors. They were doing what any sensible person would do and “working 
round” an impossible task, rationing what was essential or urgent and what 
could be omitted. 

A large proportion of the workload is phlebotomy, taking bloods and chas- 
ing the results. These should be taken by technicians but they have a fixed 
contract for 4 h meaning that they only deal with a small proportion of the 
overall workload. Tests are ordered by weekday teams, and handed over to the 
weekend team to check results, often without a clear indication of the purpose 
of the tests or what to do with the results. The weekend teams only become 
aware when blood has not been taken when they check for the result, leading 
to considerable delay in monitoring patients. There is huge variability in the 
clarity of the requests, the background information given, the appropriateness 
of the job itself and what to do with results, all compounded by the inexperi- 
ence and insecurity of junior doctors on call at weekends. 

Inada Kim (personal communication 2015) 


Staff in all environments rely on workarounds such as obtaining information 
from patients rather than their health records, or using disposable gloves as tourni- 
quets. In some cases, risks are taken such as making clinical decisions without 
information, or transferring used sharps to sharps bins in remote locations (Burnett 
et al. 2011). Often front-line coping and adaptation leads to short-term “fixes” that 
put off more fundamental, long-term solutions. These clinical work-arounds may 
also allow managers to protect themselves from inconvenient truths and shift 
accountability for failure to front-line workers (Wears and Vincent 2013). 

We therefore always need to think, when formulating the overall approach to 
safety, both about what the approach is now and what might be the most effective 
strategy in the longer term. We certainly believe that adaptive strategies should be 
further developed in the sense of being planned and to some extent formalised. 
However this is very different from the current reliance on ad hoc improvising to 
compensate for missing information, faulty equipment and the like. Figure 7.1 
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Fig.7.1 Improving systems reduces the need for adaptation 


illustrates these ideas in the context of acute medicine suggesting that increasing 
reliability and controlling flow and demand would reduce the need for adaptation 
and improvisation. With this in mind we now illustrate the five safety strategies in 
the context of the hospital; we devote most space to risk control, adaptation and 
mitigation as the other two strategies are already well described. 


Safety as Best Practice 


We have already given a number of examples of optimising strategies in hospitals in 
Chap. 6 and earlier in the book. Clearly one needs to consolidate and develop the 
approaches that aim to improve adherence to best clinical practice and thereby make 
care safer for patients. Reduction of pressure ulcers, reduction of catheter-associated 
infections, improved hand hygiene, improved patient identification and so on are 
obviously critical. Such standardised tasks and processes can be routinely audited to 
ensure that standards are maintained. All hospital environments, no matter how 
fluid and dynamic the workflow, have many core basic procedures which need to be 
followed. Programmes to improve adherence to basis procedures are always an 
important foundation for safety though never a complete solution. 


Improving the System 


Although the broad field of human factors and ergonomics is both huge and criti- 
cally important in hospital settings we will not consider it in detail here. This is 
because it has been extensively discussed elsewhere and accepted as a valid and 
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essential approach to improving safety as well as effectiveness and experience. 
Under this broad heading we would include improvements to the administration of 
medication in terms of standardizing formularies and protocols, the introduction of 
information technology in all its forms, formalising roles and responsibilities in 
clinical teams, the use of care bundles and daily goals to organise ward care and all 
efforts to improve basic working conditions. Improving safety through best practice 
and raising standards tends to require additional effort from frontline staff, at least 
in the early stages. There is an equal need to give attention to improving the system 
in order to reduce the burden on staff and so allowing more time for safety monitor- 
ing and improvement. Improvement of working conditions could involve improve- 
ments to interface design, to the ergonomics of equipment, the physical working 
environment or the reduction of interruptions and distractions that greatly increase 
propensity to error. We provide one example to illustrate the potential of this kind of 
approach. 


Reducing the Burden on Staff: Simplification and Decluttering 


The improvement of the working lives of staff is a central aim of human factors 
work. If we want staff to spend time monitoring and improving safety we have to 
create time for it and not rely on enthusiasts working at weekends and in the eve- 
nings. This means that less time must be allocated to something else and decisions 
must be made about what can be stripped out of the current work process. We will 
briefly consider the issue of policies and procedures in the British NHS as an exam- 
ple of how we might begin to simplify the system and reduce the burden on staff. 

Within the National Health Service (NHS), a vast number of policies and guide- 
lines govern all aspects of the work of the organisation. In an analysis of clinical 
guidelines related to frontline care Carthey and colleagues (2011) found that in the 
first 24 h of a patient admitted for emergency surgery on a fractured neck of femur 
there were 76 applicable guidelines. A brief survey of 15 NHS hospitals in England 
who published their policies on their websites showed that they had between 133 
and 495 policies covering everything from dress code to medication dispensing. The 
average policy was 27 pages long with length varying between 2 and 122 pages 
(Fig. 7.2). An average hospital has 8000 pages of policies on their websites running 
to more than two million words (Green et al. 2015). 

The plethora of unusable quasi-legal policies is an unconscionable burden on the 
staff, a drain on resources and paradoxically a threat to safety. First, safety critical 
essential procedures and other trivial policies are not sufficiently distinguished and 
all formal policies become degraded. Second, staff cannot possibly comply with 
even a fraction of the guidelines and procedures they have to contend with. Third, 
huge amounts of time and resource are devoted to producing policies which are 
more or less unusable in practice and distract from other potentially more fruitful 
approaches to safety. How many such procedures can we reasonably put in place in 
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one environment? It is ironic that so many policies and procedures are written with 
the aim of providing assurance and improving safety and yet the net effect is to 
degrade safety. They need to be drastically culled and simplified to produce a usable 
set of operating procedures analogous to those used in other high risk industries 
(Green et al. 2015). 


Risk Control 


Risk control strategies are used in healthcare in highly standardized and regulated 
environments such as pharmacy, blood products and radiotherapy where there are 
strict controls built into the delivery systems and restrictions on who can deliver 
therapies and what competencies they need. Risk control strategies could poten- 
tially be used much more widely particularly as a restraint on unnecessary or dan- 
gerous informal adaptation. Most importantly they could be used much more 
explicitly, with greater clarity and embraced as part of the patient safety armament. 
In this section we give examples of risk control strategies at both frontline and 
executive levels. 


Control of Medication 


Restrictions on the prescription and administration of drugs is a classic and widely 
used risk control strategy. For instance: 


e There are clear guidelines about who can and cannot administer intrathecal 
chemotherapy (Franklin et al. 2014). 

e Junior doctors are generally not permitted to prescribe certain drugs such as 
chemotherapy, oral methotrexate and other substances 

e There are legal controls on the use of many drugs such as diamorphine and other 
opiates 

e Nurses have to pass a test of competency to be permitted to administer intrave- 
nous medications 


These restrictions are generally accepted but not thought of as a risk control 
strategy or as a patient safety initiative. We list them simply to make the point that 
risk control is already used and already accepted. The next example is rather differ- 
ent in being an example of the potential for risk control. 


Potential for ‘Go and No-Go’ Controls in Surgery 


Pre-flight checks require a conscious decision to proceed, referred to as a “go/ 
no-go” decision. The civil aviation authorities set clear criteria governing the 
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acceptable conditions for flying and it is expected that aircrew will recognise situa- 
tions in which risk cannot be adequately managed. In such circumstances they are 
empowered to cancel the flight and indeed have a clear professional responsibility 
to do so. In contrast in healthcare the underlying assumption is to cope and carry on 
even in the face of considerable risk to patients. There are comparatively few areas 
in which ‘no go’ is explicitly understood and respected in healthcare. 

National guidelines on equipment standards exist in anaesthesia. If faults are 
detected in core equipment it must be replaced, and if a suitable replacement is 
not available the case should not proceed without a specific, documented reason 
(Hartle et al. 2012). There are parallels between aviation and the operating the- 
atre. An operation is a complex process that depends on the correct functioning of 
a number of different components, both human and technical. There are certain 
types of equipment failures in which it is assumed no anaesthetist would proceed 
(for example the airway gas analyser is unavailable), a situation in which some 
anaesthetists would proceed (an ultrasound is unavailable for a case requiring 
central venous cannulation), and a situation in which most anaesthetists might be 
expected to proceed (hospital uninterruptible power supply is unavailable, but all 
primary systems are functional). In practice however, although specific guidelines 
exist, there are very few clear ‘no go’ standards and the decision is left to the the- 
atre team who are inevitably influenced by productivity pressures and other factors 
(Eichhorn 2012). 

‘No go’ conditions could be defined in surgery to protect both patients and teams 
by imposing an inviolable limit which can only be bypassed in cases of emergency. 
‘No go’ conditions are objective, absolute, minimum safety standards. They corre- 
spond to the thresholds above which activities of care must stop. The no go value 
correspond to a stage beyond which there is no capacity for safe care whatever the 
other strategies. 


Placing Limits on Care 


As we write this section in January 2015 a number of British hospitals have declared 
a ‘major incident’. This does not necessarily relate to any specific incident but is a 
statement that they have reached crisis point and are unable to cope with the volume 
or type of patients they are receiving. This can happen in winter when demands are 
high, but also at other times, for example if there is a major road accident or a large 
number of older patients with pneumonia. This formal declaration allows the execu- 
tive team to take a number of steps: 


e One of the first measures is to start postponing routine activity, such as knee and 
hip operations or outpatient appointments. 

e Cancelling leave and calling in more staff 

e Making announcements to the public that the hospital is under pressure and not 
to attend the emergency department unless absolutely necessary 
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e In exceptional circumstances diverting ambulances so no emergency patients 
arrive. However, this is only used as a last resort as it increases demands on 
nearby sites. 


This is a classic risk control strategy akin to grounding flights when an airport 
cannot cope with flight volume or in response to bad weather. Many hospitals take 
these measures in response to crisis but without necessarily having a clear cut pre- 
pared strategy in place. Risk control in its fullest sense though demands an explicit, 
preferably public approach to the problem to allow a considered strategic response 
rather than an ad hoc muddling through. Again, these critical strategies are not con- 
sidered in the ambit of patient safety and are not studied, categorised, developed or 
taught. 


Monitoring, Adaptation and Response 


We have repeatedly emphasised that failures and departures from standards are not 
the exception but the day to day reality of healthcare. Safety is achieved partly by 
attempting to reduce and control such failures but also, in recognition of the impos- 
sibility of this task, by actively monitoring and managing problems that arise. The 
critical question is whether we leave this to ad hoc improvisation or try to build this 
capacity into the system (Vincent et al. 2013). Many proposed safety initiatives fall 
into this category but few have been implemented in a thoroughgoing and strategic 
manner. We provide some a small number of examples but there is huge scope for 
the development, formalisation, training and implementation of considered 
approaches to monitoring and adaptation. 


Patients and Families as Problem Detectors 


The active engagement and empowerment of patients and carers in an increasingly 
complex system poses huge challenges on many fronts. Patients and carers will 
have an increasingly important role in maintaining safety as home care expands, 
which will be discussed in the following chapter. At this point we simply want to 
highlight that almost all safety interventions that are aimed at patients fall into the 
category of monitoring, adaptation and response. In the hospital context patients 
and carers are in many cases being asked to compensate for problems of poor reli- 
ability and to form an additional defence against potential harm (Davis et al. 2011). 

Many patient focused safety interventions are aimed at encouraging people to 
speak up if they notice problems with medicines, identification or other issues. 
More challengingly patients are asked to confront staff who have not washed their 
hands to support infection control (Pittet et al. 2011). Some of these interventions 
are entirely reasonable and in fact necessary; patients have a privileged and unique 
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view of their own care and we need their insights into how safety is compromised. 
But we should be clear that patients are often being asked not only to check for 
problems that arise in complex care but to detect and compensate for problems that 
are not of their making. 


Team Training in Monitoring, Adapting and Response 


Teams, when working well, have the possibility of being safer than any one indi- 
vidual because a team can create additional defences against error by monitoring, 
double-checking and backing each other up: when one is struggling, another assists; 
when one makes an error, another picks it up (Vincent et al. 2010). Several authors 
have described how healthcare teams in emergency departments (Wears and Woods 
2007) and operating theatres (Carthey et al. 2003) anticipate and thwart potential 
safety events. This can extend to more formal collaborative cross-checking, where 
one person, role, group or unit provides feedback about the viability or possible 
gaps in another’s plans, decisions, or activities (Patterson et al. 2007). Allied to this 
is the development of a safety culture in which speaking openly about error is sup- 
ported and indeed encouraged. Once one realises that errors and failures are inevi- 
table, at least when the system is under pressure, the rationale for openness about 
error becomes clear. This kind of preparation is particularly critical in the more fluid 
and dynamic clinical environments where uncertainty is common and lapses fre- 
quent. For example, the WHO Surgical Safety Checklist is usually thought of as a 
means of checking processes such as the giving antibiotics in a timely fashion. 
However the checklist also prompts a brief period of reflection (the ‘time out’) in 
which members of the theatre team highlight potential problems and, by introduc- 
ing each other, increases the chance of team members speaking up if problems are 
identified (Haynes et al. 2009; Kolbe et al. 2012). 


Briefings and Debriefings, Handovers and Ward Rounds 


Operational meetings, handovers, ward rounds and meetings with patients and car- 
ers are all sources of intelligence that allow the monitoring of safety For example, 
operational meetings held by senior managers can unblock beds and improve the 
flow of patients through a hospital, identify safety issues relating to infection out- 
breaks, and thwart the potential for unsafe discharge of patients. Briefings carried 
out by operating theatre teams provide an opportunity to identify and resolve equip- 
ment problems, staffing and theatre list order issues before a case starts. Debriefings 
carried out at the end of the theatre list support reflective learning on what went well 
and what could be done better tomorrow. Increasingly, briefings and debriefings are 
being introduced in other healthcare domains such mental health teams (Campbell 
et al. 2014). 
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Mitigation 


The treatment and remediation of physical problems is obviously necessary when a 
patient has suffered some harm or complication. However psychological support is 
equally important both for patients and staff. Organisations vary hugely in the extent 
to which they are willing, prepared and able to provide support emotionally, practi- 
cally and financially. Some hospitals have very well established systems for respond- 
ing when patients have been harmed and highly developed mitigation strategies; 
others simply react and adapt. 


Support Systems for Staff and Patients 


The basic needs of injured patients have been understood for 20 years. We would 
all, in varying degrees, like an apology, an explanation, to know that steps had been 
taken to prevent recurrence and potentially financial and practical assistance 
(Vincent et al. 1994). We know that staff suffer a variety of consequences from 
being the ‘second victim’ as Albert Wu eloquently expressed it, not implying that 
the experiences of staff were necessarily comparable to those of injured patients 
(Wu 2000). We should also consider that a member of staff who has been seriously 
affected may well be performing poorly and be a risk to future patients; this again is 
rarely addressed. There are a few pioneering examples of programmes of support 
for both patients and staff (Box 7.2) but this is an area of safety management which 
needs substantial development (Iedema et al. 2011). 


Box 7.2. Medically Induced Trauma Support Services (MITSS) 

Linda Kenney, the founder of MITSS, experienced a grand mal seizure during 
an operation while cared for by an anaesthetist, Frederick van Pelt. Together 
they founded MITSS which provides support for both patients and staff. The 
Peer Support Programme uses colleagues as the primary support, following 
an approach that has been successfully used in the police, fire and emergency 
medical services. The programme aims to recruit credible, experienced clini- 
cal staff with personal understanding of the impact of error who are immedi- 
ately available to provide confidential reflection and support. An education 
and training programme runs in parallel that aims to challenge the culture of 
denial of emotional response to serious errors and events. The hospital con- 
cerned made an active commitment to disclosure and apology and developed 
an Early Support Activation (ESA) programme for patients and families. The 
long-term strategy is to have a comprehensive emotional support for patients, 
families and care providers (van Pelt 2008). 
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The University of Michigan Health System pioneered a programme which 
included both support for patients and staff but also active intervention to provide 
compensation if appropriate and reduce the need for costly and potentially acri- 
monious litigation. The organisation performs active surveillance for medical 
errors, fully discloses errors to patients, and offers compensation when it is at 
fault. Evaluation of the programme found a decrease in new legal claims, number 
of lawsuits per month, time to claim resolution, and costs after implementation 
of the program of disclosure with offer of compensation. This approach did not 
increase legal claims and costs even in the notoriously litigious United States 
(Kachalia et al. 2010); in fact some decline in litigation was reported in Michigan 
generally through the latter part of the study period. Several New York hospitals 
have now implemented similar “communication and resolution programmes’. To 
be successful they require the presence of a strong institutional champion, invest- 
ment in developing and marketing the program to sceptical clinicians, and mak- 
ing it clear that the results of such transformative change will take time (Mello 
et al. 2014). 


Regulatory and Political Determinants of Approaches to Safety 


We have illustrated our five strategies within hospitals from the perspectives of both 
managers and frontline clinicians. To some degree they can determine the strategies 
they use to enhance safety. However they are also constrained by the wider regula- 
tory and political environment. Regulators and politicians also have to decide on 
safety strategies for the wider system and their actions also determine the nature and 
feasibility of safety strategies within the organisations they influence. The two 
examples below show that the wider regulatory and political environment has a 
powerful influence not only on the form of healthcare that is delivered but on the 
safety strategies that can be adopted. 

In France, the regulations governing radiotherapy, which are the province of 
the Nuclear Safety Agency (ASN), are much stricter than those governing the 
use of chemotherapy which is overseen by Haute Autorite de Sante (HAS). As 
a result, radiotherapists work to an ultra-safe model with many stipulations 
about the conditions of operation and an absolute requirement to minimise all 
errors and adverse events. ASN never hesitates to audit and suspend approval in 
cases of overdose or other serious problems. In contrast, oncologists have much 
greater freedom of action and are able to begin with a high dose (to bring maxi- 
mum benefit) and reduce the dose as necessary depending on the patient’s toler- 
ance of unacceptable side effects. There are strict controls on the pharmaceutical 
production and on the preparation of chemotherapy, but comparatively few 
restraints on decisions about dose which are determined by the expert judge- 
ment of oncologists. These differences are in large part due to the different high- 
level requirements coming from the relevant authorities. Risk controls are 
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Fig. 7.3 Safety strategies in peri-operative care in Europe and the United States 


imposed on radiotherapy, while much autonomy and adaptation is allowed for 
chemotherapy. 

Different political contexts and levels of funding obviously influence the 
healthcare that can be delivered but also affect the safety strategies that can be 
employed. In this respect there are marked differences between approaches 
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adopted in Europe and the United States in the surgical treatment of older patients 
with complex problems (Fig. 7.3). In Europe approximately 8.5 % of patients 
having major surgery are admitted to intensive care at some point in their hospi- 
tal stay; mortality can be 4 % for all patients overall and as high as 20 % for older 
patients who are a poor anaesthetic risk. In contrast in the United States, 61 % of 
similar patients are admitted to intensive care; mortality is 2.1 % for all patients 
and 10-15 % for older patients with anaesthetic risk. These improvements in 
outcome in the United States are impressive but come at a considerable cost. In 
2013, critical care services alone accounted for 4 % of all US health care expen- 
ditures, or nearly 1 % GDP (Neuman and Fleisher 2013). Europe has not made 
that choice which in turn means that different strategies must be employed which 
have a much stronger emphasis on the detection of problems and rapid response 
to mitigate the expected poorer outcomes (Fig. 7.3). In fact differences in mortal- 
ity between high and low-volume hospitals are not associated with large differ- 
ences in complication rates. Instead, these differences seem to be associated with 
the ability of a hospital to effectively rescue patients from complications. 
Strategies focusing on the timely recognition and management of complications 
once they occur may be essential to improving outcomes at low-volume hospitals 
(Ghaferi et al. 2009, 2011). 


Safety in Context: The Many Hospital Environments 


We have begun to set out the safety strategies that may be employed in hospi- 
tals, illustrating the broad strategies and the associated interventions. We rec- 
ognise that much work is needed to explore this approach and map both actual 
and potential safety strategies and interventions. Another critical task is to 
consider how the strategies should be chosen and adapted to the many differ- 
ent environments within the hospital and in the light of the increasing com- 
plexity of care and the pressures on hospitals to provide safe care 24 h a day, 
7 days a week. 

We have previously argued that there are areas of the hospital which con- 
form to our ultra-safe model, others which rely on a high reliability approach 
and a number in which care is highly adaptive, albeit still with a bedrock of 
core procedures. In some of these settings safety is best achieved by a mixture 
of automation, reliable equipment and adherence to core standards and proce- 
dures. In other environments these approaches remain important but need to be 
complemented by a greater reliance on risk control, adaptation and mitigation. 
Table 7.1 provides a general illustration of how we might employ different 
strategies to different contexts in the hospital as we develop the right blend of 
interventions and modes of operation. At the moment these ideas can only be 
proposed. However it would be possible, in fact necessary, to begin to identify 
and catalogue the strategies in day-to-day use using observational and ethno- 
graphic approaches and potentially quantify the reliance on them in different 
contexts. 
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Safety in Context: The Many Hospital Environments 


Key Points 


In the past 15 years we can distinguish three phases of patient safety each 
associated with different types of action and intervention: the initial estab- 
lishment of clinical risk management and the drive to reduce harmful inci- 
dents; a second phase in which industrial safety concepts and methods 
were applied to healthcare; a third phase of focal clinical interventions, 
team and cultural development. The earlier strategies have continued as the 
new ones emerged so that we now have “a safety layer cake’. 

Many clinical services rely very heavily on ad hoc improvisation and adap- 
tation to compensate for deficiencies of organisation and poor reliability of 
basic processes. The fact that a strategy is extensively used does not neces- 
sarily mean that it is desirable 

Safety may need to be approached differently in the varying clinical con- 
texts within the hospital. All five strategic approaches will be needed in the 
hospital. 

Safety as best practice. Reduction of pressure ulcers, reduction of catheter- 
associated infections, improved hand hygiene, improved patient identifica- 
tion and adherence to core standards are critical in all environments. 
Improving the system includes standardising medication formularies and 
protocols, the introduction of information technology in all its forms, for- 
malising roles and responsibilities in clinical teams, the use of care bundles 
and daily goals to organise ward care and all efforts to improve basic work- 
ing conditions. 

Risk control includes: guidelines about who can and cannot administer 
intrathecal chemotherapy, legally controlled drugs with restrictions on 
their use and the implementation of go/no go conditions for surgical opera- 
tions and other procedures 

Monitoring, adaptation and recovery includes: patients and families as prob- 
lem detectors, teamwork and team training to adapt and recover, the use of 
briefings, debriefings and handover to anticipate and respond to problems. 
Mitigation. Organisations vary hugely in the extent to which they are willing, 
prepared and able to provide support emotionally, practically and financially. 
Some hospitals have very well established systems for responding when 
patients have been harmed and highly developed mitigation strategies. 

The wider regulatory, economic and political environment has a strong 
influence on the nature of the safety strategies that are feasible to employ 
within the healthcare system. 
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Patient safety has evolved and developed in the context of hospital care. The under- 
standing we have of the epidemiology of error and harm, the causes and contribu- 
tory factors and the potential solutions are almost entirely hospital based. Safety in 
home care is likely to require different concepts, approaches and solutions. Safety 
in this context has however been barely addressed and yet care provided in the home 
will soon become the most important context for healthcare delivery. 

The term ‘home care’ can encompass a variety of residential settings in which 
people are cared for by family, nurses and other professionals. In this chapter we use 
the term in a more restricted way to refer to the care of people in their own home, 
with varying degrees of informal and professional support. We focus on people with 
illnesses, usually chronic conditions, who are either living independently or being 
supported in their own homes by family or professional carers. Much healthcare is 
already delivered in the patient’s home and this form of provision is growing rap- 
idly. The benefits of home based care have been widely discussed, but the risks have 
not been fully articulated. In this chapter we first briefly summarise the background 
to the expansion of home care and then consider the nature and challenges for 
patient safety and the strategies that might help us manage risk in the home. 


An Ageing Population and the Expansion of Home Care 


More than 20 % of citizens in developed countries will be over 65 in 2020. These 
people, while enjoying better quality of life than previous generations, will suffer 
from a variety of long term conditions. As we discussed earlier, patients with can- 
cer, heart disease, dementia, renal and respiratory disorders may now live for 
decades with their disease. The most common causes of disability however are due 
to sight and hearing disorders which affect very large numbers of people and are 
particularly pertinent to safety in the home. As well as an absolute increase in the 
numbers of older people, there will also be a considerable relative increase. The so- 
called ‘support ratio’ — the ratio of people of working age to those over 65 — will 
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decline substantially. Due to urbanization, migration and other factors frail older 
people will be more likely to live alone (United Nations Population Fund 2012). 

Avoiding unnecessary hospitalization is a high priority for people living with 
chronic conditions. Once admitted to hospital, older adults are at an increased risk 
of poor outcomes such as readmission, increased length of stay, functional decline, 
iatrogenic complications and nursing home placement (Lang et al. 2008a; Hartgerink 
et al. 2014). The primary goals for care in the home are to avoid rehospitalisation 
and maintain a good quality of life. 

A substantial growth of home care services appears to be inevitable. There has 
been a 50 % average increase of ‘hospital at home’ services in the past 10 years 
in Western countries and the rate is accelerating steeply. For instance in the 
United States 1.7 million people are currently employed as home care workers, 
with 7.2 million patients benefitting from these services. However the number of 
people receiving home care services is projected to rise to ten million by 2018 
and to 34 million by 2030 (Gershon et al. 2012). This growing demand for the 
provision of nursing and rehabilitative care in the home as an alternative to hos- 
pital care contrasts with a scant literature on the safety, effectiveness and accept- 
ability of hospital-at-home programmes, and evidence about their relative costs 
(Harris et al. 2005). 


The Challenges of Delivering Healthcare in the Home 


The familiar hospital model of healthcare delivery cannot easily be adapted to care 
delivered in the person’s home. Patients are much more autonomous and coordina- 
tion between professionals is much more difficult. Patients and carers play a much 
more active role and take on many responsibilities that are, in other settings, the 
prerogative of professionals. They may be responsible for care planning, for sharing 
relevant information with providers and for execution of care plans, including car- 
rying out home monitoring and therapeutic regimens (Lorincz et al. 2011). 

Patients and carers also have an important role in diagnosis and assessment, in 
that they must assess the seriousness of any change in condition and decide when, 
and how quickly, to escalate the response by bringing in other services. Their 
decisions may not concur with those made by the professionals involved (Barber 
2002). Home care in all its forms needs to be negotiated to a much greater extent 
than in other settings in which professional values and organisation hold sway. In 
this context, patient preferences and values will often have a higher priority than 
medical guidelines and recommendations. Ultimately, it is the patients, their 
families and caregivers who decide what they will or will not do or accept 
(Stajduhar 2002). 

To be at home is comforting for patients because of the familiarity of the environ- 
ment and the trust in carers. The home looks very different to professionals who see 
multiple problems such as lack of knowledge, fall-inducing obstacles, unpackaged 
medications, misuse of proper disposal containers for syringe and needle and so on. 
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Professionals cannot determine the standard of safety independently of the recipi- 
ents’ perspectives, because such standards will have an impact not only on the 
patient but also on the lives of everyone involved. 

While there is general agreement on the challenges of delivering care at 
home, there is huge variation in how different countries are responding to the 
challenge. In a recent seminar at the Institute of Healthcare Improvement (IHI 
2014), United States representatives described a strategy of investing in the 
rapid development of information technology (such as tele-health and biosen- 
sors) as the ultimate solution for greater safety and efficiency of community and 
home care. In striking contrast, many other countries represented (particularly 
Japan, the Netherlands and Finland) were primarily aiming to improve solidar- 
ity among families and citizens, reduce disparities and refocus the role of doc- 
tors and nurses while maintaining affordable home care. Japan has trained 
“dementia supporters” who are expected to have the necessary knowledge and 
skills to support people with dementia and to create and promote a supportive 
culture for dementia. These different approaches make very different assump- 
tions about how care is best managed but all will face major challenges in man- 
aging risk and maintaining safety. 


The Hazards of Home Care: New Risks, New Challenges 


In the last 20 years a series of studies have revealed the hazards of care in hospital. 
In consequence we tend to assume that patients will be safer at home; this is no 
doubt true for people who are relatively well, but may not be true for the frail and 
vulnerable. Care at home could, in some circumstances, generate even more adverse 
events than hospitals. The advancing age of the average patients at home and 
increasing numbers of comorbidities and medications are all associated with 
increased risk of experiencing a medication error or an adverse event (Lorincz et al. 
2011). We cannot foresee all the potential hazards but studies are beginning to illu- 
minate some of the dangers to patients and to carers. 


Accidental Injury in the Home 


Home is a more dangerous environment than most of us imagine. The leading 
causes of unintentional home injury deaths are falls, poisoning, fire and burns, air- 
way obstruction, and drowning. Elderly residents are disproportionately affected, 
accounting for more than 2.3 million home injuries and 7000 unintentional home 
injury deaths annually in the United States (Gershon et al. 2012). People who are 
both old and ill are likely to be still more vulnerable to accidental injury. Risk fac- 
tors include decline in physical or mental function, unsafe behaviours (such as 
smoking), living alone and health care management factors such as polypharmacy 
and lack of medication review (Doran et al. 2009). 
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Adverse Events in Home Care 


An early study of home care in Canada found that 5.5 % of 279 home care clients 
suffered adverse events; injurious falls accounted for nearly half, followed by 
medication-related events, pressure ulcers and psychological harm (Johnson 2005). 
Two recent studies, one conducted in the USA (Madigan 2007) and the other in 
Canada (Sears et al. 2013), found that 13 % of home care patients experienced an 
adverse event. Larger estimates based on expert chart review of 1200 patients dis- 
charged in 2009-2010 in Canada showed a rate of 4.4 % adverse events (Blais et al. 
2013). The most frequent were injuries from falls, wound infections, behavioural or 
mental health problems and adverse outcomes from medication errors. The number 
of comorbid conditions and the level of dependency greatly increased the risk of 
experiencing an adverse event. Patients can also be victims of abuse from family 
members, which might not always be readily apparent to care providers (MacDonald 
et al. 2011). 


Adverse Drug Events 


Adverse drug events have been the most studied safety issue in the home. Some stud- 
ies have found that as many as 5 % of patients who were receiving nursing support at 
home had suffered from an adverse drug event of some kind during the previous 
week (Ellenbecker et al. 2004) and 25 % in the past 3 months (Sorensen et al. 2005). 
These problems are often due to poor communication between hospital staff, patients 
and their doctors in primary care (Ellenbecker et al. 2004). Few studies directly 
assess medication error caused by patients and family members, though models of 
human error should be equally applicable to patients and informal caregivers as to 
professionals (Barber 2002). In an Australian study, 35 % of readmissions were asso- 
ciated with incorrect drug administration at home. Those who had large stocks of 
medication at home were more exposed to adverse events (Sorensen et al. 2005). The 
majority of patients receiving home care services are taking more than five prescrip- 
tion drugs and over a third of patients are taking medications in ways that deviated 
from the prescribed medication regimen (Ellenbecker et al. 2004). 


Risk to Family and Other Care Givers 


Unpaid carers are particularly vulnerable to stress, long term burn out and ill health. 
Although health care aides play a role in giving assistance, the range of tasks falling 
to carers is considerable: assistance with eating, moving, washing, cleaning, con- 
necting systems, improvising when systems fail, making decision on drug doses 
adjustments and responding to symptoms, often without any external advice or 
guidance. 

Caring for a person with dementia is a full time occupation with no restriction on 
hours or oversight from the occupational health and safety regulations which protect 
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professionals. Care at home is viewed positively as reducing the burden on the 
healthcare system; it might be more accurate to say that the burden is being trans- 
ferred to the family and the patient themselves. The safety of professional care giv- 
ers is also of concern, in that they are often sole workers who need to venture into 
dangerous areas to care for people who may themselves be dangerous. Increasing 
use of home care is bound to increase these risks, although these can be mitigated 
with proper support and appropriate technologies. 


Problems of Transition and Coordination 


The period following discharge from hospital is a particularly vulnerable time for 
patients. About half of adults experience a medical error after hospital discharge, 
and 19-23 % suffer an adverse event, most commonly an adverse drug event 
(Greenwald et al. 2007; Kripalani et al. 2007). Hospital discharge is poorly stan- 
dardized and is characterized by discontinuity and fragmentation of care. At the 
time of first follow up with their primary doctors after hospitalization, up to 75 % of 
patients find that discharge summaries have not yet arrived which restricts their doc- 
tor’s ability to provide adequate follow-up care (Schoen et al. 2012). 

The above hazards illustrate some of the more obvious potential risks to patients 
and carers in the home environment. However the literature is not extensive and still 
primarily guided by a hospital based vision of adverse events. We are far from hav- 
ing a full picture of the combined benefits and risks of home care in relation to care 
provided in other settings. 


Influences on Safety of Healthcare Delivered in the Home 


Patient safety at home cannot be conceptualized or managed in the same way as 
patient safety in hospital because of the very different environment, roles, responsi- 
bilities, standards, supervision and regulatory context of home care. People are 
cared for in their homes and within the context of their family and the daily lives of 
all concerned. The quality and safety of care is influenced by the nature of formal 
service provision and the characteristics of the client receiving care, the physical 
environment and the availability of family and other carers (Hirdes et al. 2004; Lang 
et al. 2008b). We outline some of the main factors that will need to be assessed and 
understood when designing safe home care services. 


Socio-economic Conditions Take on a Much Greater Importance 


In an institutional setting, patients receive a certain standard of care regardless of 
their socioeconomic or cognitive status. In contrast, resources and environment of 
the home will vary hugely by socio-economic status. Wealthier people will be able 
to have a much higher standard of home care; they will have space for separate 
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‘hospital’ accommodation, paid support workers, leisure, better nutrition, less dis- 
ruption of family life, and a higher probability that relatives can ‘work’ as carers. If 
a reasonable standard is to be achieved in poorer homes specific resources would 
have to be allocated to poorer families and to supporting the medical professionals 
in charge of those patients at higher social risk. 

The elderly and disabled can be supported in their own environment 24 h a day 
by numerous ‘smart’ devices (Anker et al. 2011). Advances in telecommunication 
technologies have created new opportunities to provide tele medical care as an 
adjunct to medical management of patients. Feeling safer comes with a cost how- 
ever, and that cost is often paid by the family. Contemporary homes are not typically 
designed or envisioned as places where complex or long-term health care is pro- 
vided. The plethora of intrusive equipment, combined with the continual presence 
of carers, can make the person feel that their home is no longer a home. 


The Home Environment as Risk Factor 


The role of design in either degrading or promoting patient safety is increasingly 
understood. New hospitals may now be built with safety in mind, using good design 
to reduce equipment problems, assist infection control and reduce errors of all kinds 
(Reiling 2006). Once we move into the home, this hard won gain in understanding 
is largely lost. Stressful and potentially hazardous conditions, such as poor lighting, 
excessive clutter, presence of vermin, and aggressive family members, inadequate 
or unavailable sharps containers, and lack of readily accessible personal protective 
equipment, can directly or indirectly greatly increase the risk of adverse events in 
this population (Gershon et al. 2009, 2012). 

In some homes performing clean or sterile procedures may be almost impossible. 
There is also the possibility that home care staff may transmit infections between 
homes, particularly when patients have been discharged after contacting MRSA or 
C-difficile. Hand washing provides some protection but cleaning equipment in the 
home environment is challenging (MacDonald et al. 2011). 

The Household safety survey checklist (Table 8.1) includes the checking of fire 
and electrical risks, ergonomic (falls hazards), biological (unsanitary conditions), 
chemical, and other problems such as noise, temperature, poor security and vio- 
lence. Additional items address various patient characteristics that influence safety. 
These include age, sex, health status, ability to walk without help, number of people 
in the household, daily medication, methods patients use to keep track of medica- 
tions, presence of any medication in the home that patients no longer take, hearing 
aid use and the use of durable medical equipment and safety devices. 


Increasing Responsibilities of Carers 


Responsibility for safety at home largely falls on the shoulders of the patient, family 
members and informal carers. Caregivers are a particularly vulnerable group with 
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Table 8.1 Safety checklist for household hazardous conditions 


Hazard categories 


Fall hazards No non-slip mat in shower 


No grabs bars in shower or bath 


No nonslip rug on bathroom floor 


Loose or worn rugs or carpets 


Poor lighting 


Uneven or slippery floors 


Excessive clutter 


Awkwardly placed furniture 


Fire and electrical hazards No fire extinguisher 


No carbon monoxide alarm 


No smoke alarm 


Electrical cords damaged or overloaded 


Unsafe smoking materials 


Dangerous space heater 


Stove/cooker controls hard to reach 


Flammables near cooker top 
Biological, hygiene and Signs of cockroaches 
chemical hazards Signs of rats or mice in the home 


Excessive dust or animal hair 


Signs of lice, fleas or bed bugs 


Mould or fungus 


Rotten food or milk in the home 


Rubbish building up in the home 


Food not stored in a sanitary manner 


Cleaning products and other potential poisons are not in their 
original containers (original labels not in place) 


Other miscellaneous hazards | No emergency contact list available (for family, doctor and 
others) 


Excessively load noise in the home (from either inside or 
outside) 


Doors lacking robust locks 


Threat of violence from aggressive dogs or other pets 


Threat of violence from neighbours 


Presence of weapons 
Adapted from Gershon et al. (2012) 


an increased risk for burnout, fatigue and depression. Some family members or 
friends work 24 h a day, 7 days a week, and a number of them try to continue their 
work outside the home. Family and other unpaid caregivers often make promises 
out of love and a sense of responsibility to keep the client at home, without being 
aware that this may be beyond their capacity (Stajduhar 2002). 
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The Training and Experience of Home Care Aides 


Home care support workers play a significant role in maintaining safety at home. In 
the United States for example, with more than two million home healthcare employ- 
ees and an anticipated employment growth of 48 % by 2018, the home healthcare 
workforce sector is the fastest growing in the U.S. healthcare system (Gershon et al. 
2012). Home care aides help keep patients safe (Donelan et al. 2002) but they can 
also contribute to adverse events. Almost all are engaged in medication administra- 
tion, but many lack knowledge of medicines. A Swedish study suggested that home 
care aides had a poor understanding of the hazards of the drugs they administer. Only 
55 % knew the correct indications for common drugs and only 25 % knew the contra- 
indications and symptoms of adverse drug reactions (Axelson and Elmstahl 2004). 

Patients, family and even paid carers may all struggle to follow basic procedures 
which can be much more easily overseen and controlled in a hospital environment. 
We cannot rely on clear procedures and a strict regulatory environment for health- 
care in the home. Both patients and health care aides are apt to rely on their capacity 
to muddle through and recover from errors. It is therefore important to acknowledge 
that recovery strategies (Johnson 2005) may be more important than prevention in 
the context of home care. 


Fragmented Approach of Healthcare Professionals 


Coordination and communication among providers and across organisations and 
sectors is a complex issue, especially vulnerable at the interfaces along the contin- 
uum of care (Romagnoli et al. 2013). As many as ten different professionals may be 
involved in the care of a patient in their home and each may be based in a different 
organisation and a different location. Coordination of care can be extremely prob- 
lematic and there is considerable scope for the patient to receive conflicting or 
ambiguous recommendations which raise the risk of non-adherence and other safety 
issues. 

In a recent UK survey, most patients expressed a preference for seeing a particu- 
lar doctor, rising from 52 % among those aged 18-24 to over 80 % among those 
over 75. However, more than a quarter of patients reported being unable to see their 
preferred general practitioner consistently and recent evidence suggests that inter- 
personal continuity has declined in both inpatient and ambulatory care (Campbell 
et al. 2010; Sharma et al. 2009). 


Safety Strategies and Interventions in the Home 


Safety interventions in home care are challenging for professionals since they ques- 
tion usual assumptions and approaches. Priority is given to avoiding hospitalisation 
while increasing autonomy, and mental and social wellbeing. In this context, where 
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there is often a trade-off between autonomy and safety, the best and safest care is a 
‘mastered compromise’ in which a team of the patient, health and social care pro- 
fessionals and relatives each brings their own perspective and together arrive at a 
negotiated way forward. We believe however that, in addition to the thoughtful 
negotiation with patients and families, that it will also be valuable to consider 
broader strategic approaches to safety. 


Optimization Strategies in Home Care: Best Practice 
and System Improvement 


Optimization strategies are challenging to implement in the home especially with 
frail older people and people with mental health problems. The opportunities to 
directly implement evidence based medicine or to improve the delivery of care within 
the home are limited. Direct improvement of care can be difficult, time consuming 
and to reach only a proportion of the target group as the example in Box 8.1 shows. 


Box 8.1. Difficult Challenge for Optimisation Strategies: Lessons from a 
Centralised Nurse-led Cholesterol-Lowering Programme 
Lowering low-density lipoprotein (LDL) cholesterol in patients with diabetes 
mellitus (DM) and cardiovascular disease is critical to lowering morbidity and 
mortality. A team-based quality improvement programme attempted to 
improve compliance with evidence based medicine; registered nurses fol- 
lowed a detailed protocol to adjust cholesterol-lowering medications. General 
practitioners agreed to enrol 74 % of potential eligible patients. Thirty-six per 
cent of approved patients could not be reached via phone and 5.3 % declined 
enrolment. Of patients enrolled, 50 % did not complete the programme. Of 
those enrolled, median LDL decreased by 21 mg/dL and 52 % (33/64) 
achieved the LDL target. 

The resources required to identify, enrol and continually engage eligible 
patients raise many concerns regarding efficiency and highlight the challenges 
of implementing clinical guidelines in the home and community. 


Adapted from Kadehjian et al. (2014) 


There are however important examples of successful initiatives which fall into the 
optimisation approach. Studies have examined the effectiveness of particular 
approaches to treatment at home, covering areas such as skin care and integrity, behav- 
iour management, pain management and incontinence. The results of such research in 
nursing homes often show that “what works” involves simple, low-technology solu- 
tions that may increase staff time with patients (Stadnyk et al. 2011). In other words, 
the time staff spend listening to patients and carers, explaining, and coordinating may 
be one of the best ways of improving safety in the community and home care. 
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Discharge Planning and the Journey from Hospital to Home 


Improving the patient journey from hospital to home and improving communication 
and coordination between professionals are critical in the support of patients return- 
ing home. Clear and timely hospital discharge information, including medication 
reconciliation, are key to this improvement. The advent of new professions such as 
care managers and practice facilitators in primary care is an important development 
in supporting patients at home with establishing personalized medical plans, coor- 
dination of professionals and the navigation of the healthcare system. 

Patients at risk of poor outcomes after discharge may benefit from a comprehen- 
sive discharge planning protocol implemented by advanced practice nurses (Tibaldi 
et al. 2009; Shepperd et al. 2009); one in five hospitalizations is complicated by a 
post discharge adverse event. In one successful intervention, a nurse discharge 
advocate worked with patients during their hospital stay to arrange follow-up 
appointments, confirm medication reconciliation, and conduct patient education 
with an individualized instruction booklet that was sent to their primary care pro- 
vider. A clinical pharmacist called patients 2—4 days after discharge to reinforce the 
discharge plan and review medications. Participants in the intervention group had a 
lower rate of subsequent hospital utilisation (Jack et al. 2009). 


Training of Patients and Carers 


Recently a member of one of our families had a cancer removed and was left with a 
substantial wound which needed regular dressing. The person was discharged home 
one day after a successful operation with the patient’s partner, after minimal instruc- 
tion, being responsible for the dressing of the wound, managing a drain and dealing 
with an incipient infection. This would, of course, have been unthinkable a few 
hours previously when the patient was in hospital. Fortunately the patient’s partner 
proved adept at these rather difficult tasks. The early discharge was well intentioned 
and in the patient’s best interest but the story illustrates how quickly professional 
standards are lost once the patient is discharged home. 

In some settings, particularly in mental health, there is a much stronger emphasis 
on responsibility for the patient continuing beyond discharge and including prepara- 
tion for return to home and life in the community. Physical healthcare is moving 
into the home and community but often without this mind-set of anticipation, prepa- 
ration and continuing responsibility. If patients and carers are to take on essentially 
professional roles, albeit only with specific tasks, then surely they need to be trained 
to do so? In India, families have been co-opted as part of the workforce to help care 
for the patient but, in recognition of this role, they are prepared and trained (Box 8.2). 


Box 8.2. Training Families to Deliver Care 

At Narayana Health families are seen as having a crucial role in the recovery 
of patients following surgery. They operate a ‘Care Companion Programme’ 
to harness family members’ potential and position them as an integral part of 
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the patient’s recovery. A free structured training programme, tailored for 
those with low literacy levels, provides family members with simple medical 
skills such as monitoring vital signs, encouraging medicines adherence and 
supporting physical rehabilitation. The programme improves the quality and 
hours of care, leverages an untapped workforce, reduces costs and is univer- 
sally transferable. Five thousand people a month are being trained on the pro- 
gramme. Given the desire to place patients and families at the centre of their 
care in the NHS, such training seems a practical way to help achieve it. 


Adapted from Health Foundation (2014) 


Risk Control Strategies in Home Care 


Risk control strategies are difficult to impose in the home environment as much of 
the usual healthcare regulatory framework does not apply. We may however have to 
give some thought to a framework of standards and other controls as more health- 
care is delivered in the home, particularly when patients live in isolated or poorer 
areas and need additional support to make home care a reasonable option. 

There are almost no national standards regulating the physical environment in 
which home care services are provided, a stark contrast to requirements for health- 
care institutions. Several household safety check lists have been developed to assess 
the compatibility of home with home hospitalization (Gershon et al. 2012). Imposing 
any restrictions may be difficult to achieve because any controls would require the 
full consent of the patient and family. Developing safety standards in the home 
presents a considerable challenge as hospital oriented approaches may have limited 
applicability in the home. Similar conflicts and difficulties may arise even in insti- 
tutional home care settings (Box 8.3). 


Box 8.3. Safety Standards in Home and Residential Care: Autonomy, Rights and 
Safety 

In French hospitals there is a legal requirement that all medication should 
be given to patients by professionals. Patients cannot be entrusted with 
their own medication. Conditions for hospitalisation at home obviously 
differ from conditions in the hospital. In particular the autonomy of the 
patient and their carers is much greater. However French regulatory author- 
ities, given the current law, have so far been reluctant to delegate taking 
medication to the patient. In practice patients at home are free to act as they 
choose regardless of the views of the regulatory authorities. Modifying this 
law will require an exception to be made for home hospitalisation, with the 
risk of increased ambiguity about the respective roles of patients and 
professionals. 
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Regulatory systems face considerable challenges in home care. For 
instance, French law considers that senior residents of retirement home no 
longer have a private home. Their bedroom in the residence is therefore 
considered as their home with all associated rights and privileges including 
adding personal furnishing, smoking, and even cooking. This was previ- 
ously entirely positive as residents were entering retirement homes in their 
80s while still able to live relatively independently. With an ageing popula- 
tion, and growing cost of retirement homes, people are more commonly 
entering retirement homes in their 90s and 70 % have severe cognitive 
impairment problems. The risk of fire when smoking, combined with lim- 
ited medical access to the patient due to personal furniture, are now very 
high. The internal rules and regulations often forbid smoking and adding 
unsuitable furniture, but can be successfully challenged by patients and 
their relatives as a deprivation of rights. Changing these laws is not straight- 
forward since this issue concerns a fundamental principle of freedom given 
by the French Constitution. 


Monitoring, Adaptation and Response Strategies 
in Home Care 


Monitoring, adaptation and response strategies are clearly to the fore as safety strat- 
egies for home care. The assumption that healthcare staff and organisations should 
wait for patients to present with an illness is giving way, at least for some chronic 
conditions, to a more proactive approach to monitoring, detection of problems and 
response aided by a variety of innovations in information technology. 

In the hospital monitoring and detection of problems is largely the responsibil- 
ity of staff. In the home however, patients and carers need to monitor, adapt and 
respond. This raises the question of how, as with staff, these abilities can be sup- 
ported, encouraged and perhaps trained. This requires, as in other contexts, the 
development of a safety culture, and potentially other transferable routines such 
as safety briefings. For instance a colleague, who is a carer for a family member 
with serious mental health problems, has described how she and her husband have 
developed a routine of regular morning telephone calls in which they review the 
day, the support for the family member, any worrying symptoms, medication 
availability and other issues. This is, in essence, a safety briefing. Such systems 
could be developed in partnership with patients and carers and become an estab- 
lished safety strategy. As yet however, we do not know of any attempts to develop 
formal safety strategies for patients and carers at home, although there are many 
examples of individual patients developing their own ingenious and innovative 
approaches. 
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Detecting Deterioration 


Carefully designed and implemented care management and tele health programs can 
improve safety and reduce health care spending (Baker et al. 2012). Many smart homes 
and remote monitoring solutions are emerging to support patients at home (Chan et al. 
2009). The critical safety issue however is how to detect deterioration. In the context of 
hospitals David Bates and Eyal Zimmerman have argued that ‘finding patients before 
they crash’ is the next major opportunity to improve patient safety (Bates and Zimlichman 
2014). In hospitals the primary tools to improve detection are the electronic health 
record, physiological sensors, decision analytics and mobile phones, with the assump- 
tion of a rapid clinical response once deterioration is identified. All these can potentially 
be employed in the home but implementation is far from straightforward. 

The potential for home monitoring to improve the management of chronic conditions 
is considerable. Four of eleven programs that were part of the US Medicare Coordinated 
Care Demonstration reduced hospitalizations by 8-33 % among enrolees who had a 
high risk of near-term hospitalization (Brown et al. 2012). Home monitoring can come 
in the form of telephone support and visits, the promotion of self-care and the use of a 
variety of external or implantable devices. Multi-component interventions variously 
incorporate enhanced team communication, care planning, education and support for 
patients and carers, direct access to hospital care and the use of information technologies 
(Jaarsma et al. 2013). Tele medical monitoring service can combine with this support at 
home and reduce the number and duration of hospital admissions for worsening pathol- 
ogies (Anker et al. 2011), though may not currently be suitable for patients with cogni- 
tive, visual or other sensory impairments (van den Berg et al. 2012). Implanted devices 
have been shown to be effective in reducing hospitalisation due to heart failure and 
reduce the need for active participation of the patient (Bui and Fonarow 2012). 


Box 8.4. New Professional Roles Emerging 

The care manager’s central role is delivering and coordinating services for 
patients, including coordinating care across clinicians, settings, and condi- 
tions, and helping patients access and navigate the system. While these care 
coordination activities may benefit any patient, they can be particularly useful 
for those with chronic conditions and many care needs. Working closely with 
patients and their families, care managers’ activities often include: 


e Assessing (and regularly reassessing) patients’ care needs 

e Developing, reinforcing, and monitoring care plans 

e Providing education and encouraging self-management 

e Communicating information across clinicians and settings 

e Connecting patients to community resources and social services 


Adapted from Taylor et al. (2013) 
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It is becoming clear that successful home care requires not only monitoring but 
the development of a system of care which includes the selection of appropriate 
physiological indices, the timely interpretation of data by an experienced clinician, 
and a system capable of responding rapidly to provide appropriate treatment and to 
monitor the response to that treatment (Box 8.4). Few existing home monitoring 
approaches provide this full cycle of care and in addition these approaches will need 
to be tailored to individual patients according to disease severity, the patient’s capac- 
ity for self-management, the availability of support and the home care environment 
(Bui and Fonarow 2012). 


Mitigation 


The benefits of providing healthcare in the home, for both minor and more serious 
conditions, are undoubted. As homecare becomes more complex however there will 
be a correspondingly greater risk of adverse events and therefore a need to antici- 
pate and plan for a response to those events and mitigate their effects. In a hospital 
the rapid initiation of a remedial response to physical harm is part of routine clinical 
practice and we have previously discussed the need for psychological support for 
patients and staff. Mitigation strategies in the home will need to include consider- 
ation of both the psychological impact and preparation for an emergency response. 
In the event of a crisis the patient will need access to the right person at the right 
time; a capacity for rapid rehospitalisation whenever needed will be critical, espe- 
cially at nights and week-ends. 


The Responsibilities of Carers 


The recognition that staff can be seriously affected by the role they have played in an 
error or harmful event has been a very important step forward, although programmes 
for supporting staff are still rare. In the home patients and carers are increasingly 
taking on professional roles and therefore they too may make serious and consequen- 
tial errors. If a family member makes an error they have all the burden of responsibil- 
ity that a professional bears combined with the terrible experience of harming 
someone close to them. Interviews with carers suggest that the responsibility for 
giving powerful medications can become burdensome both because of the time com- 
mitment and anxiety about making mistakes; many carers do not receive clear guid- 
ance about medication, leading to omissions, incorrect doses, anxiety and confusion 
which are often not recognised by health professionals (While et al. 2013). Relatives 
of people near the end of their lives face the additional worry about hastening death 
through improper use of medication (Payne et al. 2014). The blurring of boundaries 
between family carers and professionals is difficult for all concerned particularly 
towards the end of a person’s life. As well as providing support and training to carers, 
we will also have to consider how to provide support in the event of a serious error, 
an issue which has currently not been addressed at all. 
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Mitigation Strategies in Home Haemodialysis 


Home haemodialysis is hugely beneficial for patients in that dialysis at home pre- 
serves independence and autonomy and reduces dependence on the hospital. 
Patients and carers can become apprehensive about performing such a complex set 
of tasks and fearful about the potential for dialysis related emergencies (Pauly 
et al. 2015). Home dialysis is generally a very safe procedure but a number of 
deaths due to error have been recorded, such as a man who died from exsanguina- 
tion after he connected a saline bag to a blood circuit (Allcock et al. 2012). In the 
early stages of home dialysis patients report frequent mistakes while they learn the 
procedures and develop their own personal safety strategies, such as ensuring that 
there are no interruptions and ensuring that help is on hand in the event of problems 
(Rajkomar et al. 2014). 

Established haemodialysis units provide training and prepare patients and carers 
very carefully for home dialysis procedures. Instilling a culture of safety without 
unduly alarming the patient, ongoing vigilance from both patients and professionals 
and ongoing support are critical. In addition Pauly and colleagues (2015) suggest 
that it is necessary to develop safety strategies to mitigate the risk of adverse events, 
which include the anticipation and preparation for any adverse events that do occur. 
They set out a series of measures which includes the provision of an explanatory 
letter for a patient to take to an emergency department, ensuring the patient is fully 
briefed in emergency procedures, and a full set of procedures for staff to initiate to 
respond and learn from any events that do occur. The most important lesson from 
their account is the preparation that they provide for patients and carers includes an 
explicit and comprehensive set of safety strategies as part of the basic programme. 


Reflections on Home Care Safety 


By highlighting the risks of home care safety we do not intend in any way to suggest 
that care in the home is not desirable or possible. On the contrary it is essential for 
all of us who wish to live independently for as long as possible as we age. We can 
also see that innovations in remote medicine, tele monitoring and smart homes may 
well resolve some of the safety problems we have described. However care in the 
home does highlight some fundamental safety issues. Most importantly there is an 
apparent clash between autonomy and safety, although this is only a clash if you feel 
that older people must adhere to an ultra-safe model of safety. In reality safety is 
always only one of a number of objectives and we often knowingly take risks in the 
pursuit of other benefits, such as travelling, sport or exploration. More than that we 
accept the right of people to take personal risks even though the costs of failure 
often fall on the wider population when they are patched up again in hospital. Safety 
in the home needs to be assessed in the same way, not in terms of absolute safety but 
alongside other benefits. This is nicely captured in the term ‘the dignity of risk’ used 
in Australia by those providing services for frail older people. The model for safety 
in the home then is not ultra-safe; a frail older person at home has more in common 
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with a deep sea trawler man than a pilot. Safety is managed by personal resilience, 
expertise and a high reliance on monitoring, adaptation and, most of all, recovery. 


Key Points 

e Safety in home care has barely been addressed and yet care given in a per- 
son’s home will soon become the most important context for healthcare 
delivery. 

e Many home care patients experience an adverse event. The most frequent 
adverse events are injuries from falls, wound infections, behavioural or 
mental health problems and adverse outcomes from medication errors. 

e Patient safety at home cannot be conceptualized or managed in the same 
way as patient safety in hospital because of the very different environment, 
roles, responsibilities, standards, supervision and regulatory context of 
home care. 

e Stressful and potentially hazardous conditions can directly or indirectly 
greatly increase the risk of adverse events at home 

e Safety at home falls largely on the shoulders of patients, family members 
and relatives. Caregivers are a particularly vulnerable group with an 
increased risk for burnout, fatigue and depression. 

e Limited available standards and the fragmented approach of healthcare 
professionals make home care more prone to errors 

e Safety interventions must give priority to reduce hospitalisations, increase 
wellbeing, increase communication among carers and with patients, and 
improve recovery strategies. 

e There are opportunities to implement evidence based care in the home but 
it is considerably more difficult than in other settings. Much can be done to 
improve support systems, detection of problems and recovery. 

e Highlighting the risks of home care does not imply that care in the home 
is not desirable or possible. We should not aim for absolute safety in home 
care but assess risks in the context of the benefits of living as indepen- 
dently as possible at home. Safety is managed by personal resilience, 
expertise and a high reliance on monitoring, adaptation and, most of all, 
recovery. 


Open Access This chapter is distributed under the terms of the Creative Commons Attribution 
Noncommercial License, which permits any noncommercial use, distribution, and reproduction in 
any medium, provided the original author(s) and source are credited. 
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Patient safety is a young discipline that emerged from medico-legal concerns asso- 
ciated with the risk of occurrence of specific and easily identifiable adverse events 
that were mostly associated with hospital care. In primary care however patients are 
managed over long periods of time and the safety issues that arise are likely to be of 
a very different character. We have earlier suggested that we should recast patient 
safety as the management of risk over time; this perspective may be better adapted 
to the longer time scales of primary care. 

With the exception of exceptional criminal behaviour, such as the example of 
Harold Shipman (Baker and Hurwitz 2009), primary care has not been considered 
as an important source of specific adverse events. The priorities in primary care 
have been to improve access and overall quality of care, rather than to examine 
system vulnerabilities and safety issues. However once we begin to examine safety 
over time, rather than in terms of specific incidents, safety issues may become more 
visible. In this chapter we briefly outline current knowledge of patient safety in 
primary care and then consider whether the five strategic approaches can be applied 
in this context. 


Challenges for Primary Care 


Primary care in every country faces huge challenges. People are living longer, often 
with one or more chronic conditions, and need a greater degree of support in the 
community while still expecting to have a good quality of life at home. Primary care 
practitioners are dealing with more patients with complex conditions and comor- 
bidities making it impossible to provide the best and safest care to every patient. 
Primary care clinics have to coordinate both a very wide range of professions and 
respond to patient values and preferences. The increasing need to personalise medi- 
cine and engage the patient in decisions about their care, while according with the 
values of primary care, demands more time than is realistically available (Snowdon 
et al. 2014) 
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Primary care physicians express frustration that the knowledge and skills they 
are expected to master exceed the limits of human capability (Bodenheimer 2006). 
The introduction of genomics and personalized medicine will only increase the 
complexity and demands placed on primary care services and the knowledge and 
technologies that staff need to understand and employ. The number of general prac- 
titioners working alone is falling rapidly. Primary care doctors are working in larger 
clinics and federations to provide a more consistent and coordinated approach to 
care. Nurses and other professions are taking on increased responsibilities and a 
wider clinical remit. However these changes, while important, will not be sufficient 
to address current and future challenges. Safety in primary care needs to be recon- 
sidered in the light of the above, increasing the priority of national primary care 
patient safety strategies and developing interventions appropriate to the context. 


The Nature of Risk in Primary Care 


Doctors in primary care work together to present and solve problems in short con- 
sultations, typically 7-16 min across Europe. Patients often (but not invariably) 
present with early manifestations of illness, often against a backgrounds of pre- 
existing psychosocial problems and physical co-morbidities. Diagnosis in such cir- 
cumstances is necessarily provisional and general practitioners face an enormously 
difficult task in identifying the few cases of serious illness amongst the very large 
number of minor problems. To be ‘safe’ in this context, in the sense of being certain 
that a patient does not have a serious illness, is not feasible. To investigate every 
problem to achieve diagnostic certainty would not be good practice; the anxiety 
generated, the risks of investigation and tests and the inconvenience to patients 
would be counter-productive. In addition any healthcare system would be bankrupt 
within months. Given this equation, time is often used as a diagnostic and therapeu- 
tic tool, but always with considerable latitude. 

Patients in primary care are much freer than in any hospital system. They may 
decide not to comply with their nurse or doctor’s recommendations because they 
conflict with personal aims or lifestyle; this is typically the case of 30-50 % of 
patients (Barber 2002). Patients in primary care, because of their greater autonomy, 
may increase the risks of adverse events in some circumstances which poses many 
difficult ethical and medico-legal issues (Buetow et al. 2009). 

Until recently many general practitioners worked alone or in small groups. This 
model of practice, often combined with a very high workload, made it difficult to 
see risk at a system level or consider broad risk management strategies. General 
practitioners and other primary care staff may have high personal standards of care 
without being aware of the frequency or impact of any errors or the vulnerabilities 
and risks to patients in the wider system of care (Jacobson et al. 2003). The flexibil- 
ity, diversity and personal approach for every patient that primary care clinicians 
rightly regard as a strength make it very challenging to define error and adverse 
events in a reasonable and consistent manner. 
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Error and Harm in Primary Care 


Studies in hospitals have shown that different methods of gathering data reveal dif- 
ferent types of error and harm and that a combination of methods is needed to map 
the landscape of safety (Hogan et al. 2008). The same is true in primary care 
(Sandars and Esmail 2003). One study used five contrasting methods to identify 
adverse events: physician reported adverse events, pharmacist reported adverse 
events, patients’ experiences of adverse events, assessment of a random sample of 
medical records, and assessment of all deceased patients. There was almost no over- 
lap of adverse events detected between these methods. The patient survey accounted 
for the highest number of events and the pharmacist reports for the lowest number 
(Wetzels et al. 2008). These difficulties in measurement are partly due to the lack of 
developed systems of monitoring safety in this context but also to the difficulties of 
definition of both error and adverse events. 

The top five medical errors reported by family physicians are: errors in prescribing 
medications; errors in getting the right laboratory test done for the right patient at the 
right time; filing system errors; errors in dispensing medications; and errors in 
responding to abnormal laboratory test results. Poor communication and coordination 
between professionals and different elements of the health and social care system are 
the primary cause of many of the problems identified (Dovey et al. 2003). The lack of 
timely and accurate information after patients are discharged from hospital and delays 
in obtaining test results are both major risks (Kripalani et al. 2007; Callen et al. 2012). 
A more recent study of adverse events in primary care (ESPRIT) used a prospective 
method gathering data over seven consecutive days (Kret and Michel 2013). General 
practitioners reported 475 errors over a total of 13,438 visits (just under 3 %) but 95 % 
of those reported errors were minor and any consequences they had were immediately 
recognized. These studies identify important problems, but they are restricted to those 
immediately visible to the primary care doctor, which in effect means those occurring 
within the clinic or involving communication with other services 

Studies which monitor errors within a specific time period, while valuable, will 
clearly not detect problems that are only revealed in the longer term, such as wrong 
or delayed diagnosis which are far more prominent in analyses of claims and com- 
plaints. The most common allegation in medical negligence claims in primary care 
by far (up to 40 % of the total claims) is missed or delayed diagnosis especially for 
cancer and cardiac disease (Gandhi et al. 2006; Singh et al. 2013). This reflects again 
how difficult it is for general practitioners individually to monitor and detect rare but 
serious problems that are not immediately apparent in the daily routine and also the 
need to consider safety issues over much longer time periods in this context 


Diagnostic Errors 


Diagnostic errors have not yet received the attention they deserve, considering their 
probable importance in leading to harm or sub-standard treatment for patients; the 
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emphasis on systems has led us away from examining core clinical skills such as diag- 
nosis and decision making (Wachter 2010) but these are now becoming a major focus. 
Cancer outcomes in the United Kingdom, while improving, are not as good as in many 
European countries and this may be partly explained by delayed or incorrect initial 
diagnoses (Lyratzopoulos et al. 2014). Diagnostic errors are difficult to study, being 
hard to define, hard to specify as occurring at a particular point in time and not directly 
observable. The term “diagnostic error’ may indicate either a relatively discrete event, 
such as missing a fracture on an X-ray, or a narrative which unfolds over months or 
even years, such as a delayed diagnosis of lung cancer because of failures in the coor- 
dination of outpatient care (Vincent 2010). These examples show that the term error 
can be an oversimplification of a long story of undiagnosed illness. 

Studies of multiple consultations in the presentation of cancer show that the nature 
of the disease, both its presentation and rarity, is a powerful predictor of speed of 
diagnosis. Most patients with cancer present to primary care with symptoms that have 
low or very low positive predictive values. Even “red flag” symptoms (such as rectal 
bleeding, dysphagia, haemoptysis, and haematuria) are not strongly associated with 
the presence of cancer. Despite these challenges about 80 % of patients with cancer 
are referred to a hospital specialist after one (50 %) or two (30 %) consultations. But 
a substantial minority (20 %) of patients with cancer visit a primary care doctor with 
relevant symptoms three or more times before referral. This number is often consid- 
ered by policy makers and cancer charities to reflect an avoidable delay. These patients 
however are often those with cancers which are particularly difficult to diagnose 
because of their non-specific symptom pattern (Lyratzopoulos et al. 2014). 

We still have many challenges to address even in providing a complete account 
of the various errors, adverse events and wider safety issues in primary care. 
Problems of definition, methodology and method abound. There is however evi- 
dence from a number of quarters of risks to patients from vulnerabilities in both 
individuals and systems, though this realisation must be tempered by the fact that 
primary care practitioners cannot (and emphatically should not) try to minimise all 
possible risk; such an approach would lead to massive over-investigation and treat- 
ment and would be completely unaffordable. Managing risk in this context is a 
challenging affair and we would suggest, currently largely conceptualised as the 
responsibility of individual doctors. Doctors, nurses and other primary care profes- 
sionals obviously play a critical role in the management of risk in the negotiation, 
shared decision making and treatment of individual patients. However we need, as 
in hospitals, to look beyond the individual perspective and try to imagine what man- 
aging risk and safety across a population of patients might look like. Can we apply 
the framework of five strategies and the associated interventions to this context to 
provide a conceptual and practical approach to risk management in primary care? 


Safety as Best Practice 


Adherence to best practice and evidence based medicine is as important in primary 
care as in other contexts. In England considerable emphasis has been placed on 
external incentives for improving primary care most notably in the use of 
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Payment-for-Performance system (P4P). The United Kingdom pioneered the idea 
in 2004 with the Quality and Outcomes Framework, and the United States, France 
and other countries have developed similar schemes. The Idea of P4P is simple 
enough: pay for compliance to evidence based medicine. Pay for performance can 
certainly drive change in specific practices but its overall impact on quality of care 
and professional values is still debated (Lee et al. 2012; Hussey et al. 2011; Ryan 
et al. 2015). Irrespective of this, the more difficult issue from the safety perspective 
is that P4P does not address the three top three adverse events as cited in the litera- 
ture: delayed and missed diagnosis; medication safety; and poor strategies of care 
and inadequate surveillance (Brami and Amalberti 2010; Lorincz et al. 2011). 

Many interventions use quality improvement approaches to improve adherence 
to guidelines to improve outcomes for patients (Marshall et al. 2013). For example, 
depression in primary care settings is often not well managed or treated with resul- 
tant poor outcomes. As depression is one of the major causes of disability world- 
wide this is a critical issue. In a remarkable early study of quality improvement 
approaches, managed primary care practices in the United States were randomized 
to usual care or a quality improvement programme. The intervention involved insti- 
tutional commitment to quality improvement, identification of a pool of potentially 
depressed patients, training local experts and nurse specialists to provide clinician 
and patient education, and either nurses for medication follow-up or access to 
trained psychotherapists. Mental health outcomes and retention of employment of 
depressed patients improved over a year, while medical visits did not increase over- 
all. A modest investment in quality improvement produced substantial gains in 
some areas, including a marked increased detection of patients with depression 
(Wells et al. 2000). 

Studies of known diagnostic errors in primary find that most concern common 
conditions such as pneumonia, cancer, congestive heart failure, acute renal failure, 
and urinary tract infections; this is of course partly because these conditions are 
common in any case. Problems identified may lie in the clinical encounter but are 
also related to referrals, patient-related factors, follow-up and tracking of diagnostic 
information, and performance and interpretation of diagnostic tests. While some of 
these problems may be addressed by improving the skills of individual practitioners 
this is unlikely to have a major impact. To begin with many diagnostic errors may 
be due to fundamental features of human cognition which are hard to change. People 
make frequent and effective use of heuristics in day to day thinking which are gener- 
ally extremely useful but which can also mislead in situations where more analytical 
thinking is required (Kahneman 2011). Large numbers of heuristics and biases have 
been identified (Croskerry 2013) and it is not yet clear whether it is possible, still 
less cost effective, to train people to improve diagnostic accuracy. In terms of the 
management of risk we may be better to invest in improving the more tractable 
aspects of the system (such as communication of test results) and, probably even 
more important, investing more time and effort in following up patients who attend 
for an initial presentation with potentially serious symptoms. This would require the 
development of failsafe systems for overlooked abnormal tests and recall of patients 
who did not attend planned investigations or follow up appointments (Lyratzopoulos 
et al. 2014). In our terms we would move from a strategy of best practice and system 
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improvement towards one of monitoring, adaptation and recovery. We would accept 
that some diagnostic delays and errors are inevitable and shift the balance of 
resources towards rapid detection. 


Improving the System 


Delivering the care suggested by guidelines is obviously a desirable objective, 
but the goal will remain difficult to achieve. There are many reasons for this but 
two are particularly important. First, guidelines are only a partial guide to 
treatment even for a relatively healthy person with a single condition. When 
caring for a frail older person with multiple problems doctors need to make 
many adjustments to achieve the best care for that individual (Persell et al. 
2010). A second major problem is the extraordinary pace of medical innovation 
and the accompanying exponential growth in scientific knowledge in modern 
medicine; the half-life of knowledge is only 6 years in most specialities 
(Shojania et al. 2007; Alderson et al. 2014). Once the new knowledge is avail- 
able, it takes time to consolidate and put it in the form of guidelines and recom- 
mendations. It takes as long again to establish a system of new recommendations 
to work, updated at a proper pace, and with relevant information for ageing 
comorbid patients. 

The introduction of information technology and Electronic Health records repre- 
sent the best chance of responding to the rapid evolution of medical knowledge and 
practice. New technologies are expected to assist and support medical decision 
making and prescribing, provide prompts for ordering and checking test results, 
enhance cooperation and allow patients to access their medical record (De Lusignan 
et al. 2014); they may also facilitate new approaches to measuring clinical perfor- 
mance and detecting poor care (Weiner et al. 2012). But the effective use of such 
technology will depend on consistent deployment at a national level and on associ- 
ated training in how to use these systems effectively without being burdened by an 
overload of information, recommendations and alerts (Shoen et al. 2012; Jones et al. 
2014). The full benefits of such systems have not yet been realised but we are 
already beginning to see that their introduction has a number of unanticipated con- 
sequences, some of which are highly undesirable. For instance clinicians in the past 
would go to speak to a radiologist to discuss an ambiguous CT scan, whereas now 
they will make their own solitary decision from a screen. Young doctors will review 
their patients on the electronic health record rather than actually go and see them 
(Wachter 2015). 

Optimisation strategies (best practice and improving the system) are per- 
fectly feasible when conducted at scale but much more difficult to implement in 
a small primary care clinic or practice. The improvements needed in the primary 
care system and the levers of change are national or at least regional issues. 
Programmes with clear and specific improvement targets can have an impact, as 
the example of treatment of depression shows, but considerable resources are 
needed to have an impact at scale. Primary care clinics can make some use of 
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optimisation strategies but, at a local level, may need to make more use of the 
other forms of safety strategy which place a stronger emphasis on the active 
management of risk. 


Risk Control Strategies 


When systems are under pressure risk control strategies need to be considered to main- 
tain safety and potentially also to constrain costs. An important example of risk control 
is the deliberate restriction of clinical practice in circumstances posing high risk to 
patients. This method of controlling risk is most prominent in the prescription and 
administration of high risk medication. For instance, in primary care certain drugs can- 
not be prescribed by general practitioners or supplied by community pharmacists. 

The argument for risk control is essentially that it is better to explicitly manage 
demand and conditions of work in order to maintain standards and preserve safety; 
the alternative is a system which delivers some high quality care but which poten- 
tially runs out of control. The most obvious potential control is to cap the maximum 
number of patients who are under the care of a single primary care team, which 
varies according to patient characteristics and how care is provided. Provided some 
realistic assessment of patient need and consultation length can be made, then cap- 
ping the number of patients per team is a possible option but solutions of this kind 
can only be achieved at a national level. Demand can be managed locally by greater 
involvement of nurses and paramedical staff in care delivery or by transfer to hospi- 
tals or other facilities but this may not be feasible in isolated or poorer areas. There 
are however many examples of risk control in primary care and the potential for a 
much more thorough consideration of this particular strategy. 


Control by Assessment of Competency 


Almost all countries with developed healthcare systems have procedures for licens- 
ing doctors, identifying and potentially retraining those who fall below the required 
standard. Whatever the merits of the a systems approach to safety, there is no doubt 
that a proportion of problems are linked to the standard of care provided by indi- 
viduals; in Australia for instance 3 % of the workforce accounted for half the com- 
plaints made with some individuals the subject of repeated complaints. Many 
countries require general practitioners to engage in a CPD or CPE programme 
(Continuous Professional Development/Education) and a formal re-accreditation 
process (e.g., Netherlands, Norway, US). Each doctor must demonstrate continuing 
education and development and compliance with the requirements of the recertifica- 
tion process (Murgatroyd 2011). Poorly performing physicians identified by these 
systems are retrained with potential restriction on their licence. These surveillance 
systems however are complex and not always very effective (Lipner et al. 2013). 
Accountability and sanctions, while a critical part of the safety armament, are not 
simple to implement or sustain. 
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Control of Hazards 


The control of known hazards may have more immediate application in primary care. 
For example, the use of risk control is very important in mental health. It is perhaps 
unfortunate that the most immediate examples are those which restrain or control peo- 
ple; locked wards, restraint techniques and pharmaceutical control of people are thank- 
fully much more sparingly than in the past. There are however much more subtle 
methods of risk control that can be applied at a population level and which attempt to 
control hazards rather than people. For instance the analgesic paracetamol was a com- 
mon method of suicide and non-fatal self-harm, responsible for many accidental deaths 
and a frequently cause of hepatotoxicity and liver unit admissions. Legislation intro- 
duced by the United Kingdom government in 1998 restricted the pack size to 32 tablets 
in pharmacies and 16 tablets for non-pharmacy sales. Reducing packet size sounds an 
implausible approach to reducing the risk of poisoning but many people interviewed 
after overdoses reported that it was an impulsive act involving the use of available 
drugs stored in the home. Impulsive acts therefore became less dangerous with smaller 
packets. Ten years after the changes there had been a significant and sustained reduc- 
tion in suicide and harm from paracetamol and a similar successful restriction on other 
paracetomol based products (Box 9.1) (Gunnell et al. 2008; Hawton et al. 2012). 


Box 9.1. Withdrawal of Co-proxamol to Reduce Suicide 

The extent of fatal poisoning with the analgesic co-proxamol was a concern 
for many years. The margin between therapeutic and potentially lethal con- 
centrations is relatively narrow. Between 1997 and 1999 co-proxamol was the 
single drug used most frequently for suicide in England and Wales (766 deaths 
over the 3 year period). The Committee on Safety of Medicines (CSM) 
advised that co-proxamol should be withdrawn from use in the UK which 
took place in December 2007. 

A steep reduction in prescribing of co-proxamol occurred in the post- 
intervention period 2005-7 with the number of prescriptions falling by 59 %. 
Prescribing of some other analgesics increased significantly during this time. 
These changes were associated with a major reduction in deaths involving co- 
proxamol compared with an estimated 295 fewer suicides and 349 fewer 
deaths including accidental poisonings. During the 6 years following the with- 
drawal of co-proxamol there was a major reduction in poisoning deaths involv- 
ing this drug without apparent increase in deaths involving other analgesics. 


Adapted from Hawton et al. (2012) 


Monitoring, Adaptation and Response 


General practitioners and other primary care professionals are of course constantly 
engaged in monitoring patients but a safety strategy of this nature represents a 
broader attempt to enhance the capacity to detect deterioration and other problems 
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in the delivery of healthcare to the wider population. As examples we consider one 
proposal targeted at professionals and a second one aimed at developing a more col- 
laborative culture to help primary care professionals adopt a more patient centred 
approach and enhance teamwork. 


Developing a More Systematic Approach to Watching and Waiting 


Time is an essential means of managing risk in primary care. A general practitioner 
may know from the presenting symptoms that there is a small chance that this is a 
cancer or other serious complaint; but to refer everyone with such symptoms is 
neither feasible nor good practice. Instead, they ask the patient to watch and to 
monitor any change. The use of time is central to the doctor’s routines and practice 
management. Over time diseases and circumstances evolve and a problem encoun- 
tered at one time will not be the same at a later point. Taking more time solves many 
health problems in general practice; some will simply resolve, regardless of the 
diagnosis or intervention, while others will manifest a much clearer symptom pat- 
tern. In a significant number of cases, the best way to deal with a situation is just to 
monitor its development and refrain from clinical intervention. Waiting is paradoxi- 
cally often more valuable than acting immediately, provided both patient and doctor 
collaborate in the monitoring of symptoms and trust is maintained on either side. 
While this strategy is well known and implicitly accepted by both doctors and 
patients the use of time as a strategy for management has seldom been explicitly 
studied. 

The development of the Tempos Framework (Amalberti and Brami 2012) 
reflects the importance of time management in primary care. Five time scales 
termed “Tempos’ requiring parallel processing by GPs are distinguished in the 
framework: (1) disease’s Tempo (unexpected rapid evolutions, slow reaction to 
treatment); (2) office’s Tempo (day-to-day agenda and interruptions); (3) patient’s 
Tempo (time to express symptoms, compliance, emotion); (4) system’s Tempo 
(time for appointments, exams, and feedback) and (5) physician’s Tempo (time to 
access knowledge). This framework (Table 9.1) may serve as a basis for detecting 
adverse events and recovery, as well as improving adverse event analysis (see 
Chap. 6). 


Improving Transitions Between Hospital and Primary Care 


Although the attempt to improve transitions of care has been largely driven from the 
hospital side it has important implications for safety in primary care. Unintentional 
changes to medication regimens are an important and well-studied hazard; patients 
may be discharged from hospital on a very different set of medications from their 
pre-admission medications, not because of clinical need but through failure to reas- 
sess medication at the time of discharge. Medication reconciliation is a process, 
usually carried out by pharmacists, in which a full assessment is made of the 
patient’s medication before hospital and the new medicines prescribed in hospital, 
to ensure the patient returns home with the correct medication. Medication 
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Table 9.1 Tempo framework for primary care 


Disease’s Misleading pathology evolving moving faster or slower than is typical 


tempo Inappropriate therapeutic action, too slow, not efficient. Unfounded 
reassurance given to the patient on the basis of standard evolution 


Poor explanations/instructions given to the patient and relatives on what 
should occur, when, what makes an alerting pattern, and what to do. 


Doctor’s Experiencing difficulties in accessing the right knowledge at the right time, 
Tempo due to misleading symptoms, fatigue, pressure or interruptions. 


Technique required for clinical intervention not applied with all usual rigor, 
due to poor practice, interruptions, fatigue, and more 


Medical case not detected as going beyond doctor’s competence 
Office’s Excessive busy diaries, time pressure 
tempo Interruptions managements, telephone, patients, secretary, and more 


Incomplete traceability of medical data, rushed medical history, writing style 
limited to minimum 


Patient’s Failure to reveal symptoms, minimizing, or postponing the expression 
tempo Poor doctor-patient relationship, conflicts, specific contexts 

System’s Delay in getting appointments for examinations (imagery) or with specialists 
tempo Unexpected approach of emergency department in sending the patient home 


Lost information among careers, lost mail, lost message 
Adapted from Amalberti and Brami (2012) 


reconciliation alone, although important, has not been shown to have clinically sig- 
nificant outcomes, such as reducing subsequent hospitalisation (Kwan et al. 2013). 
Attention has now turned to a fuller assessment of the entire transition process 
driven by the high rate of early readmission after discharge. In the United States for 
instance, nearly one in five Medicare patients are readmitted within 30 days of dis- 
charge (Rennke et al. 2013). 

Programmes to improve transition have a variety of components and there is as 
yet little consistency of approach in the various programmes studied. Most have a 
dedicated discharge team, carry out medication reconciliation, and provide guid- 
ance and sometimes training to the patient and family. Some however also extend to 
a dedicated transition nurse or other professional who has the specific responsibility 
of monitoring the patient’s progress after discharge through telephone calls or visits, 
coordinating other professionals and responding to any signs of deterioration. 
Studies give few details of how these programmes are funded and how much train- 
ing is needed for such people. Strikingly, even the most comprehensive programmes 
made little if any attempt to engage the main primary care providers (Rennke et al. 
2013). This broad approach relies partly on improving the reliability of care within 
the hospital but, from our point of view, the approach after discharge is one of 
anticipating, monitoring, adapting and responding to patient need; this is a very dif- 
ferent safety strategy than often considered in the primary care context which is 
largely dominated by attempts to improve adherence to guidelines. 

Strategies to improve safety in primary care will require many of the components 
of these transition programmes. A strong emphasis on patient engagement, coordi- 
nation and cooperation both within and between teams and above all a mind-set of 
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anticipation, monitoring and caring for the patient beyond their immediate hospital 
stay or primary care encounter. Primary care providers do of course take this view 
but current systems, or rather lack of systems, make it very difficult to achieve in 
practice. New roles in the team could be devoted to this coordination and organisa- 
tion. New posts of practice facilitators and care managers would enhance the capac- 
ity of the primary care team to monitor safety. The care manager’s central role could 
deliver and coordinate services for patients, including coordinating care across cli- 
nicians, settings, and conditions, and helping patients access and navigate the sys- 
tem (Taylor et al. 2013). 


Mitigation 


The capacity to respond rapidly to deterioration is critical to safe care both within 
hospital and outside, as we have discussed above. The term mitigation extends to 
the care of patients whose care has failed them in some way leading to harm that has 
become a new problem in its own right, both for the patient and those caring for 
them. Dealing with such scenarios of course requires the capacity for rapid response 
and for all the necessary clinical interventions, but also requires a broader response 
to deal with the specific problems associated with harm due to poor care rather than 
to disease. 

In other settings we have emphasised the need for support for both patients and 
staff and this is equally true in primary care. Developing formal programmes to 
provide such support has been a struggle in hospitals which have the resources and 
scale to initiate and sustain such help. In primary care, support for either patients or 
staff relies on the actions of individuals and on responsive and compassionate col- 
leagues. In most cases this is all that is needed but, as we have argued earlier, more 
extensive and longer term counselling or other interventions may be needed to help 
patients, careers or staff who have been involved in a serious error or failure. This is 
currently very difficult to provide in primary care, though some help is given from 
professional associations. As further integration takes place in primary care we will 
be able to think more strategically about the management of risk in populations of 
people and, while prevention and detection will be to the fore, the mitigation of 
harm should not be neglected. 


Reflections on Safety in Primary Care 


It may seem premature to think about safety strategies in primary care given the 
slow pace of development of patient safety in this setting. A review of safety in 
primary care in the United States published 10 years after the landmark report “To 
err is human’ found numerous major gaps in understanding of ambulatory safety 
and almost no credible studies on how to improve primary care safety (Lorincz et al. 
2011). There is still a need for basic epidemiological data, for more analyses of the 
causes of harm to patients in primary care and for the development of specific inter- 
ventions (Wynia and Classen 2011). We would add that the very concept of patient 
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safety in primary care needs to be examined as, in its current form, it may not reso- 
nate sufficiently with primary care practitioners. For patients, safety in primary care 
is partly associated with control and regulation but strongly linked with personal 
trust and relationships (Rhodes et al. 2015). 

We believe nevertheless that sketching the kind of strategies that might be 
employed and drawing on a conceptual framework will assist both our understand- 
ing of safety in primary care and the development of appropriate intervention strate- 
gies. Innovations in information technology will potentially have a massive impact 
on the coordination of care and the monitoring and support of patients in their 
homes. Improving systems within practices and clinics and adherence to clinical 
guidelines are important but may have less impact than in the more structured envi- 
ronment of hospitals. Risk control, in the sense of restricting demand and being 
clear about competencies and standards, needs to be examined as a formal overall 
strategy not just in the context of specific clinical issues. 

Primary care however is, par excellence, an adaptive system in which clinical 
decisions evolve from highly individual clinical encounters and relationships in 
which patient values and preferences are often the pre-eminent consideration. In 
such contexts we believe that the development of sophisticated monitoring and 
response strategies may be more important in the overall balance than any of the 
other broad approaches. The full engagement and indeed education and training of 
patients and careers in the management of risk will be a necessary core of any such 
approach. It may be that risk will be more effectively managed in a loose system 
which incorporates rapid adaptation and response than by the imposition of guide- 
lines and controls. This view however is, as yet, just a view and requires exploration, 
development and testing. 


Key Points 

e Primary care faces huge challenges. Primary care practitioners are dealing 
with increasingly complex conditions making it impossible to provide the 
best and safest care to every patient. 

e Primary care staff can have high personal standards of care without being 
fully aware of the risks to patients in the wider system of care. This makes 
it difficult to understand risk at a system level or consider population ori- 
ented risk management strategies. 

¢ The concept of patient safety in its current form it may not resonate suffi- 
ciently with primary care practitioners. For patients, safety in primary care 
is strongly linked with personal trust and relationships 

e Poor communication and coordination between different elements of the 
health and social care system, the lack of timely and accurate information 
after patients are discharged from hospital and delays in obtaining test 
results are major risks. 
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e Diagnostic errors have not yet received the attention they deserve, consid- 
ering their probable importance in leading to harm or sub-standard treat- 
ment for patients. 

e Quality improvement approaches can be used to improve adherence to 
guidelines to improve outcomes for patients. 

e The exponential growth in scientific knowledge is a particular challenge in 
primary care. New technologies are expected to assist and support medical 
decision making and prescribing, ordering and checking test results, and 
enhance cooperation and coordination 

e When systems are under pressure risk control strategies need to be consid- 
ered to maintain safety and potentially also to constrain costs. 

e Time, in the sense of intelligent and active watching and waiting, is an 
essential means of managing risk in primary care. 

e Strategies to improve safety in primary care will require a strong emphasis 
on patient engagement, coordination between teams and a mind-set of 
anticipation, monitoring and caring for the patient beyond their immediate 
primary care encounter. 

e Risk in primary care may be more effectively managed in a loose system 
which incorporates rapid adaptation and response than by the imposition 
of guidelines and controls. 


Open Access This chapter is distributed under the terms of the Creative Commons Attribution 
Noncommercial License, which permits any noncommercial use, distribution, and reproduction in 
any medium, provided the original author(s) and source are credited. 


References 


Alderson L, Alderson P, Tan T (2014) Median life span of a cohort of national institute for health 
and care excellence clinical guidelines was about 60 months. J Clin Epidemiol 67(1):52-55 
Amalberti R, Brami J (2012) “Tempos’ management in primary care: a key factor for classifying 
adverse events, and improving quality and safety. BMJ Qual Saf 21:729-736 

Baker R, Hurwitz B (2009) Intentionally harmful violations and patient safety: the example of 
Harold Shipman. J Royal Soc Med 102:223-227 

Barber N (2002) Should we consider non-compliance a medical error? Qual Saf Health Care 
11(1):81-84 

Bodenheimer T (2006) Primary care: will it survive? New Eng J Med 335(9):861-862 

Brami J, Amalberti R (2010) La sécurité du patient en médecine générale. Springer 

Buetow S, Kiata L, Liew T, Kenealy T, Dovey S, Elwyn G (2009) Patient error: a preliminary 
taxonomy. Ann Fam Med 7:223-231 

Callen JL, Westbrook JI, Georgiou A, Li J (2012) Failure to follow-up test results for ambulatory 
patients: a systematic review. J Gen Intern Med 27(10):1334-1348 

Croskerry P (2013) From mindless to mindful practice—cognitive bias and clinical decision mak- 
ing. New Eng J Med 368(26):2445—2448 


126 9 Safety Strategies in Primary Care 


De Lusignan S, Mold F, Sheikh A, Majeed A, Wyatt J, Quinn T, Cavill M et al (2014) Patients’ 
online access to their electronic health records and linked online services: a systematic inter- 
pretative review. BMJ Open 4:e006021 

Dovey SM, Phillips RL, Green LA, Fryer GE (2003) Types of medical errors commonly reported 
by family physicians. Am Fam Physician 67(4):697 

Gandhi TK, Kachalia A, Thomas EJ, Puopolo AL, Yoon C, Brennan TA, Studdert DM (2006) 
Missed and delayed diagnoses in the ambulatory setting: a study of closed malpractice claims. 
Ann Intern Med 145(7):488-496 

Gunnell D, Hawton K, Ho D, Evans J, O’Connor S, Potokar J, Donovan J, Kapur N (2008) Hospital 
admissions for self-harm after discharge from psychiatric inpatient care: cohort study. BMJ 
337:a2278 

Hawton K, Betgen H, Simkin S, Wells C, Kapur N, Gunnell D (2012) Six-year follow-up of impact 
of co-proxamol withdrawal in England and Wales on prescribing and deaths: time-series study. 
PLoS Med 9(5):606 

Hogan H, Olsen S, Scobie S, Chapman E, Sachs R, McKee M, Vincent C, Thomson R (2008) What 
can we learn about patient safety from information sources within an acute hospital: a step on 
the ladder of integrated risk management? Qual Saf Health Care 17(3):209-215. doi:10.1136/ 
qshc.2006.020008 

Hussey PS, Ridgely MS, Rosenthal MB (2011) The PROMETHEUS bundled payment experi- 
ment: slow start shows problems in implementing new payment models. Health Aff 30(1 1): 
2116-2124 

Jacobson L, Elwyn G, Robling M, Jones RT (2003) Error and safety in primary care: no clear 
boundaries. Fam Pract 20(3):237-241 

Jones S, Rudin R, Perry T, Shekelle P (2014) Health information technology: an updated system- 
atic review with a focus on meaningful use. Ann Intern Med 160:48-54 

Kahneman D (2011) Thinking, fast and slow. Macmillan, New York 

Kret M, Michel P (2013) Esprit, Etude Nationale en Soins primaires sur les événements indésir- 
ables, Rapport CCECQA. http://www.ccecqa.asso.fr/projets/esprit 

Kripalani S, LeFevre F, Phillips CO, Williams MV, Basaviah P, Baker DW (2007) Deficits in com- 
munication and information transfer between hospital-based and primary care physicians: 
implications for patient safety and continuity of care. JAMA 297(8):83 1-841 

Kwan JL, Lo L, Sampson M, Shojania KG (2013) Medication reconciliation during transitions of 
care as a patient safety strategy. A systematic review. Ann Intern Med 158(5_Part_2):397—-403. 
doi: 10.7326/0003-48 19-158-5-20130305 1-00006 

Lee G, Kleinman K, Soumerai S, Tse A, Cole D, Fridkin S, Horan T, Platt R, Gay C, Kassler W, 
Goldmann D, John Jernigan J, Ashish K, Jha A (2012) Effect of non-payment for preventable 
infections in U.S. Hospitals. New Engl J Med 367:1428-1437 

Lipner RS, Hess BJ, Phillips RL Jr (2013) Specialty board certification in the United States: issues 
and evidence. J Continu Edu Health Prof 33(Suppl 1):S20-S35 

Lorincz CY, Drazen E, Sokol PE (2011) Research in ambulatory patient safety 2000-2010: a 
10-year review. American Medical Association, Chicago 

Lyratzopoulos G, Wardle J, Rubin G (2014) Rethinking diagnostic delay in cancer: how difficult is 
the diagnosis? BMJ 349:¢7400 

Marshall M, Pronovost P, Dixon-Woods M (2013) Promotion of improvement as a science. Lancet 
381(9864):419-421 

Murgatroyd G (2011) Continuing professional development. General Medical Council, London 

Persell S, Dolan N, Friesema E, Thompson J, Kaiser D, Baker D (2010) Frequency of inappropri- 
ate medical exceptions to quality measures. Ann Intern Med 152:225-231 

Rennke S, Nguyen OK, Shoeb MH, Magan Y, Wachter RM, Ranji SR (2013) Hospital-initiated 
transitional care interventions as a patient safety strategy. A systematic review. Ann Intern Med 
158(5_Part_2):433-440 

Rhodes P, Campbell S, Sanders C (2015) Trust, temporality and systems: how do patients under- 
stand patient safety in primary care? A qualitative study. Health Expect. doi: 10.111 1/hex.12342 


References 127 


Ryan AM, Burgess JF, Pesko MF, Borden WB, Dimick JB (2015) The early effects of medicare’s 
mandatory hospital Pay-for-performance program. Health Serv Res 50(1):81-97 

Sandars J, Esmail A (2003) The frequency and nature of medical error in primary care: understand- 
ing the diversity across studies. Fam Pract 20(3):23 1-236 

Singh H, Giardina T, Meyer A, Forjuoh S, Reis M, Thomas EJ (2013) Types and origins of diag- 
nostic errors in primary care settings. JAMA Inter Med 173:18-25 

Shoen C, Osborn R, Squires D, Pasmussen P, Pierson R, Appelbaum S (2012) A survey of primary 
care doctors in ten countries shows progress in use of health information technology, less in 
other areas. Health Aff 31(12):2805-2816 

Shojania K, Sampson M, Ansari M, JI S, Douvette S, Moher D (2007) How quickly do systematic 
reviews go out of date? (2007). A survival analysis. Ann Inter Med 147:224—233 

Snowdon A, Scnarr K, Alessi C (2014) It’s all about me, the personalization of health system. 
Western University Canada, London 

Taylor E, Matcha R, Meyers D, Genevro J, Peikes D (2013) Enhancing the primary care team to 
provide redesigned care: the roles of practice facilitators and care managers. Ann Inter Med 
1:80-83 

Vincent C (2010) Patient safety, 2nd edn. Wiley Blackwell, Oxford 

Wetzels R, Wolters R, van Weel C, Wensing M (2008) Mix of methods is needed to identify 
adverse events in general practice: a prospective observational study. BMC Fam Pract 15(9):35 

Wachter RM (2010) Why diagnostic errors don’t get any respect—and what can be done about 
them. Health Aff 29(9):1605-1610 

Wachter RM (2015) The digital doctor. McGraw Hill, New York 

Weiner JP, Fowles JB, Chan KS (2012) New paradigms for measuring clinical performance using 
electronic health records. International J Qual Health Care 24(3):200-205 

Wells KB, Sherbourne C, Schoenbaum M et al (2000) Impact of disseminating quality improve- 
ment programs for depression in managed primary care: a randomized controlled trial. JAMA 
283(2):212—220. doi:10.1001/jama.283.2.212 

Wynia MK, Classen DC (2011) Improving ambulatory patient safety. JAMA 306(22):2504—2505. 
doi:10.1001/jama.2011.1820 


The developments described in the previous chapters are required because our pres- 
ent vision of safety is not adequate for the challenges we face. Our arguments for 
these developments rest on analyses of the nature of safety in healthcare as it is 
delivered today. However, as is well known, healthcare is changing rapidly and 
there are many new opportunities, pressures and challenges. We believe that these 
coming changes will have further implications for how safety is understood and 
practiced which will increase the urgency and importance of the transition to a 
broader vision. 

In this chapter we briefly summarise some of the recent and forthcoming devel- 
opments in healthcare. These have been widely discussed and we are only con- 
cerned to summarise some key points. The primary purpose of the chapter is to 
consider the implications for patient safety and for the strategies and practices we 
set out in the remainder of the book. 


The Changing Nature of Healthcare 


The problems faced by healthcare, and many of the challenges for patient safety, 
arise in part from the very success of modern medicine in combating disease. 
Because of improvements in diet, nutrition, medicine and environment many people 
are living longer but also living with one or more chronic conditions such as diabe- 
tes, cardiovascular disease and cancer. Diseases which were once fatal are now 
becoming chronic conditions. 

The survival rate for cancers, infections and AIDS, strokes, cardiovascular dis- 
ease and many other previously fatal diseases have improved significantly even in 
the last decade. For instance a recent French study of 427,000 new adult cancer 
cases diagnosed between 1989 and 2004, showed significant improvements in 
5 year survival for most cancers, especially prostate cancer (Grosclaude et al. 2013). 
In the French population of 65 million people over 320,000 new cancers are 
diagnosed every year; of these 150,000 are designated as ‘cured’ within the same 
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year and a further 150,000 can expect to survive at least 5 years. Similar improve- 
ments in survival and quality of life in AIDS patients have been seen in developed 
countries with the introduction of HAART therapies (Highly Active Antiretroviral 
Therapy) (Borrell et al. 2006). Most people treated for chronic conditions are going 
back to work, family and home, with the personal ambition of leading as healthy life 
as possible. These developments present huge challenges for healthcare systems in 
providing care and yet remaining affordable. 

The traditional hospital cannot remain the main provider of care and core of the 
medical system simply because it would be unaffordable. Hospitals are still of 
course essential in any future vision of healthcare but will increasingly focus on 
investigations and procedures that require a very high level of expertise and sophis- 
ticated technology. The proportion of beds devoted to high dependency and inten- 
sive care will increase while the overall number of beds will reduce (Ackroyd-Stolarz 
et al. 2011). 

Medical innovations have lead progressively to shorter hospital stays. Earlier 
diagnosis and less invasive treatments, such as laparoscopic surgery, mean that treat- 
ment can be instituted earlier and with less disruption to a person’s life. Genomics 
and preventive medicine will potentially allow even earlier diagnosis and preventa- 
tive treatment. Increasingly care will need to move outside the hospital which will 
require a very different vision of primary care. Hospitals specialists will move out- 
side the hospital taking their expertise to homes and to other facilities (Jackson et al. 
2013). Because of the growth of point of care testing and the refinement of many 
treatments, it will be possible to provide a considerable amount of care in community 
settings. Surgery, radiotherapy, chemotherapy and haemodialysis can all potentially 
be provided in out-patient settings or smaller community centres. 


Box 10.1. A Summary of the Healthcare Paradigm Shift Needed for the Future 


From... ...To 

One size fits all Approach Personalized medicine 
Fragmented, One-way Communication Integrated, two ways 

Provider centred Focus Patient centred 
Centralized-Hospital Location Shift to community 

Invasive Treatment Less invasive, image-based 
Procedure-based Reimbursement Episode-based, Outcome-Based 
Treating sickness Objective Preventing sickness- “Wellness” 


Adapted from (http://www.gilcommunity.com/) 


The changes outlined above have profound implications for all health profes- 
sionals (Box 10.1). Over the last 50 years hospital based medical specialties have 
been dominant in terms of status, reward and expertise. Specialisation has brought 
the greatest rewards although this has led to a loss of generalist skills and the ability 
to deal with the complex co-morbidities of care of older patients (Wachter and 
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Goldman 2002). The need for traditional surgery is declining because of the avail- 
ability of less invasive interventions carried out by radiologists, gastroenterologists 
and cardiologists. The role of the doctor is also changing rapidly as more care can 
be given by nurses and other professionals leaving the doctor in a more supervisory 
capacity and as the arbiter of complex decisions. 


Improved Safety in Some Contexts 


While we cannot know exactly what new risks will arise we can at least anticipate 
some of the areas in which safety may either be enhanced or threatened; some clas- 
sic hazards will probably decline while others will increase or change in nature. We 
are mainly concerned with outlining potential new risks but it is important to bal- 
ance this with an illustration of how innovations and changing patterns of care can 
bring dramatic improvements in safety. 

Healthcare acquired infections have been one of the greatest challenges of recent 
years and, in some countries, one of the most visible successes in enhancing safety. 
For instance, surgical site infections are among the most common healthcare associ- 
ated infections, accounting up to 31 % of healthcare-associated infections in hospi- 
talized patients. However the incidence of clinical significant surgical site infections 
(CS-SSIs) following low-to moderate-risk ambulatory surgery in low risk patients is 
declining rapidly through a combination of shorter length of stay and new operative 
techniques and technologies (Owens et al. 2014). With 80 % of surgery becoming 
day surgery, nosocomial infection could even become a minor safety issue rather 
than one that dominates the safety agenda as it has in recent years. This is a radical 
example of the power of innovation, both in new technologies and organisation of 
care, in tackling problems that resisted the efforts of even sustained classic quality 
and safety improvement efforts at the frontline. 

Infection and anti-microbial resistance is of course a massive and continuing 
challenge and remains a major threat to the health of the population, particularly 
older people with a number of co-morbidities (Yoshikawa 2002; Davies and Davies 
2010). We are simply arguing that innovations in surgical care and changing pat- 
terns of delivery may well result in a decline in certain types of healthcare acquired 
infections and therefore a changing pattern of risk. 


New Challenges for Patient Safety 


Evolution in healthcare, or indeed in any industry, inevitably bring new risks as well 
as benefits. Some risks arise directly from new technologies and from new forms of 
organisation. Other risks come, as we have argued, from the very increase in stan- 
dards that innovation brings as clinical teams and organisations struggle to adapt to 
the new expectations. For instance, patients are being discharged earlier from hos- 
pital after surgery. This is clearly beneficial but, concomitantly, brings new risks. 
Errors in post-operative care and errors in non-operative management already cause 
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more frequent adverse events than errors in surgical technique (Anderson et al. 
2013; Symons et al. 2013). These trends will probably continue and even 
accelerate. 


Increasing Complexity 


Evidence based guidelines (mostly developed for people with single diseases) are 
inappropriate for those people with multiple conditions, resulting in potential over- 
treatment and over-complex regimes of assessment and surveillance. Problems of 
harm due to over-treatment and from polypharmacy are likely to increase, exacer- 
bated by the lack of oversight of individual patients in community settings. Clinical 
judgment becomes more important, not less, as evidence based guidelines become 
less applicable because of the increasing complexity of patients’ illnesses. There is 
an increased need to listen and determine patients’ priorities at the same time as new 
forms of organisation potentially make this more difficult. 


The Challenges and Risks of Care Coordination 


The coordination of the care of individual patients, at least those who are more seri- 
ously ill, is currently managed through a loose network of hospital doctors, general 
practitioners and nurses with precise arrangements varying across countries. Care 
will need to be coordinated and managed much more actively when more is deliv- 
ered in the community. This will require different models of oversight and a very 
different organisation of care. 

The provision of care to populations of people demands an integration of hospital 
care, primary care and home care in organisational structures which are already 
emerging in various forms in England (Dalton 2014). In the United Kingdom gen- 
eral practitioners will struggle to coordinate the increasingly complex care pro- 
vided. It will be necessary to coordinate high technology resources and services in 
community clinics to fully supervise patients’ health trajectories. Expanded teams 
and community based care will mean that non-physician providers take on larger 
responsibilities for patient care. 

Patients’ pathways are becoming more complex every day. A patient with a 
chronic condition often has a succession of carers, each for a short period of time, 
and with a dedicated role. Outside the hospital, and sometimes inside, there may be 
no overall coordination of care, except through the efforts of the patient and family 
themselves. Errors resulting from poor coordination between carers and patients are 
already common (Masotti et al. 2009) and could well increase dramatically. 
Information technology, team interventions and patient focused solutions can all 
play a part in the resolution of this issue but the challenge is immense and the solu- 
tions difficult to implement. 
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The Benefits and Risks of Screening 


Evidence is mounting that ever earlier detection and ever wider definition of disease 
is having some adverse consequences for healthy people. Diagnostic scanning of 
the abdomen, pelvis, chest, head, and neck can reveal “incidental findings” in up to 
40 % of individuals being tested for other reasons (Orme et al. 2010). Most of these 
“incidentalomas” are benign. A very small number of people will benefit from early 
detection of an incidental malignant tumour, but many others will suffer the anxiety 
and adverse effects of further investigation and treatment of an “abnormality” that 
would never have harmed them (Moynihan et al. 2012). 

Increased screening also brings more direct hazards. There is evidence from epi- 
demiological studies that the organ doses corresponding to a common CT study (two 
or three scans, resulting in a dose in the range of 30-90 mSv) result in an increased 
risk of cancer. The evidence is reasonably convincing for adults and very convincing 
for children. However 75 % of physicians significantly underestimate the radiation 
dose from a CT scan, and 53 % of radiologists and 91 % of emergency-room physi- 
cians do not believe that CT scans increased the lifetime risk of cancer. It has been 
estimated that about 0.4 % of all cancers in the United States may be attributable to 
the radiation from past CT scans. Given the rapid increase in CT scans this estimate 
might in future be in the range of 1.5-2.0 % (Brenner and Hall 2007). 


The Benefits and Risks of Information Technology 


The revolution in information technology is having a massive impact on healthcare 
but also bringing new risks (Wachter 2015). Information technology can reduce 
risks to patients by providing effective and timely clinical decision support (Jones 
et al. 2014), improving coordination and communication, and may become a major 
driver of clinical performance and quality (Weiner et al. 2012; Classen et al. 2011). 
Various forms of tele-health facilitate and support people in their own homes (Baker 
et al. 2011; Anker et al. 2011). The massive introduction of IT in healthcare will 
probably be associated with a reduction of errors due to poor checking, poor read- 
ability, and poor traceability (Wachter 2015). 

Information technologies are also making decades of stored data usable, search- 
able, and actionable by the healthcare sector as a whole. This information is in the 
form of ‘big data’, so called not only for its sheer volume, but for its complexity, 
diversity and timeliness. Analysis of big data can help clinicians and organizations 
deliver higher-quality, more cost-effective care. Big data can potentially lead to the 
development of an anticipatory health care system, where providers can create per- 
sonalized evidence-based medicine, tailored to patients’ personal preferences for 
how (Groves et al. 2013). 

However such dramatic changes could have negative consequences for both the 
quality and safety of care if not properly organized, taught to professionals and 
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patients, and accompanied by careful implementation and testing. New risks gener- 
ated by these technologies are ethics (confidentiality), increased inequalities 
between regions and social categories, and paradoxically a reduction of direct con- 
tact between patients and professionals (Taylor et al. 2014). 

Public information on safety will be increasingly available. Public reporting of 
safety and quality standards is expected to provide accountability and transparency 
thereby enhancing trust between patients, regulators, payers, and providers (Werner 
and Asch 2005). Alongside these benefits of public reporting, however, there are 
potential risks which include a potential loss of trust either in particular institutions 
or in healthcare more generally. Developing optimal data collection instruments and 
assuring adequate quality from participating centres are significant challenges 
(Resnic and Welt 2009). Although considerable efforts are being made to assess 
safety in a scientific way that allows comparison between hospitals and other facili- 
ties, the views expressed on social media could be a much more important determi- 
nant of a hospital’s reputation. 


The Burden of Healthcare: Impact on Patients and Carers 


Finally, there is a substantial risk, as care moves into the community, that more 
demands will be placed on patients and their carers. These demands are potentially 
quite diffuse and wide ranging as new technologies emerge which are suitable for 
use in the home. Patients will increasingly have to work collaboratively with hospi- 
tal and other staff to manage and coordinate their care. 

While personal responsibility for care is very important for people who are in 
reasonable health (Roland and Paddison 2013) it becomes increasingly unrealistic 
as a person becomes frail and suffering from multiple problems. The burden of 
organisation of care is greater for patients who are elderly, less well educated, or 
from less affluent communities or who also have mental health problems. New tech- 
nology will not solve problems associated with health literacy, which is not likely to 
improve greatly in the near future. If people are going to be cared for in their homes, 
both patients and carers will need much more comprehensive support and instruc- 
tions in the nature of the disease, the treatments they give themselves and most 
importantly in the detection and response to deterioration. 

The phrase ‘burden of treatment’ refers to the considerable demands that health- 
care systems place on patients and carers (Mair and May 2014). For instance patients 
or their caregivers often have to monitor and manage their symptoms at home, 
which can include collecting and inputting clinical data. Adhering to complex treat- 
ment regimens and coordinating multiple drugs can also contribute to the burden of 
treatment. Coping with uncoordinated health and social care systems can further 
add to an ever growing list of management responsibilities and tasks facing patients 
and their caregivers. This is real work and can be overwhelming—it is time consum- 
ing and calls for high levels of numeracy, literacy, and, sometimes, technical knowl- 
edge. People who are socially isolated, poorly educated, have low health literacy, 
are cognitively impaired, do not speak the local language, or who have sensory or 
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physical challenges will simply find this impossible. Mair and May (2014) propose 
that a key future quality metric will be the extent to which care disrupts people’s 
lives and that a key question for doctors to ask their patients is “Can you really do 
what I am asking you to do?’. 


A Global Revolution Rather Than a Local Evolution 


We can foresee that healthcare systems will change dramatically in the way they are 
organised and the way care is delivered. We will need different kinds of hospitals 
with fewer beds, shorter stays, advanced technologies and new competencies. Much 
more care will be delivered in the home and community, as we cope with extended 
life expectancy and the rise in chronic conditions. 

The consequences for those working in healthcare and the organisation of care 
are profound. In addition to this people no longer view healthcare as they have in the 
past and assumptions about what is achievable and what is expected are also chang- 
ing rapidly. Ageing and well-being are coming to be seen as the right of every citi- 
zen with the concomitant expectation of reasonable living conditions, medical 
support, social rights, pensions, and an ability to maintain a full life in the commu- 
nity. This is an empowering emphasis in most respects but it greatly increases the 
challenges for healthcare as the demands seem ever growing and sometimes impos- 
sible to meet. We are now sometimes seeing a presumption of error and poor care if 
the outcome does not meet expectations rather than, in the past, an acceptance of the 
course of the disease with only secondary consideration of the possibility of error. 

The patient journey is new for healthcare but already replaced in many people’s 
minds with the concept of a lifetime citizen journey. Medical problems are no longer 
considered in isolation but in the longer term context of a person’s life. Legal aspects 
of this transformation in mindset are already clearly visible. For instance when a 
patient is harmed by healthcare and seeks compensations there are legal guidelines for 
assessing the amount due. This total compensation is assessed on several dimensions 
which include physical disability, suffering and permanent damage and the impact on 
personal and professional life, loss of earnings and so on. In France the assessment of 
compensation used to be restricted, apart from some exceptional cases, to the immedi- 
ate aftermath of the event with the assumption of recovery in a reasonable time period. 
However in recent years the legal guidelines on both time period and quality of life 
have been greatly extended so that compensation can now be made for reduced well- 
being and quality of life in the mid and long term (Béjui-Hugues 2011) 

We will also need in the coming decade to rethink and adapt the surveillance of 
the healthcare system, learn more from the introduction of electronic information 
for the purpose of surveillance, develop accreditation methods which encompass 
patient journeys, assess the impact of the movement of professionals and patients 
across borders, and last but not least, rethink the whole payment scheme of health- 
care to reflect the growing collective and interdependent nature of care delivered to 
patients. The list might seem long but these are not suppositions about the future but 
present realities. 


136 


These changes, already well underway have important implications for the man- 
agement of safety in healthcare. We have already argued that we need an expanded 
vision of safety along the patient journey and which is adapted to multiple contexts. 
This is already necessary but will be given greater impetus by the changes summarised 
above and by the inevitable challenges to safety in periods of transition. We believe 
that we need to try to anticipate the risks both of the new systems and of the transi- 
tional period with its inevitable upheavals. The management of risk, and the wider 
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vision of patient safety, needs to be integrated into the new and evolving systems. 


Key Points 


The population is ageing due to the advances of modern medicine com- 
bined with improved diet and environment. Many people are now living 
with chronic conditions that were once fatal. 

Multiple innovations in technical care, such as minimally invasive surgery, 
have significantly shortened hospital length of stay 

Improving standards of care, new technology and new organisations can 
bring huge benefits but also create new risks and place new burdens on both 
patients and professionals. Those tendencies are expected to continue and 
accelerate with the new advent of genomics and personalised medicine. 

A new model of healthcare needs to emerge in which there is a transition 
from carer and hospital centred rationale to a focus on the patient’s journey 
across settings with much care delivered at home and in the community. 
These changes are already underway and having a considerable impact on 
hospitals. 

Some hazards, such as nosocomial infections, should reduce. However we 
should anticipate new risks such as increased problems in the coordination 
of care, more problems with over treatment and the integration of multiple 
treatments in patients suffering from a number of diseases. 

Information technology and personalized medicine are often cited as solu- 
tions to these new patient safety problems, but will probably need signifi- 
cant adaptation and maturation before delivering all their potential 
capacities for safety improvement. 

The ‘burden of treatment’ may become considerable as more care moves 
to the home and community. A key question for doctors to ask their patients 
is “Can you really do what I am asking you to do?” 

We have already argued that we need an expanded vision of safety along 
the patient journey which is adapted to multiple contexts. This is already 
necessary but will be given greater impetus by the changes summarised 
above and by the inevitable challenges to safety in periods of transition. 
The changes required have huge implications for the organisation of 
healthcare and for the work of professionals. Perhaps most importantly for 
the healthcare system, it is also a profound change of the whole society, 
and in the expectations of its citizens. 
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The foundational ideas which have informed our thinking are essentially quite sim- 
ple but hard won in the sense that they are not for the most part embedded in current 
thinking. We have argued that we need to view safety through the patient’s eyes and 
that safety needs to be approached very differently in the varying settings along the 
patient journey. This implies in turn that we need to think more explicitly about 
what kind of safety strategies are most useful in different contexts. We can now 
draw these themes together and consider the new directions that emerge. 

In this chapter we first review the ideas and arguments of the book and sum- 
marise the transitions in patient safety that we believe are needed (Box 11.1). We 
then set out a compendium of safety and risk management strategies which can be 
selected, combined and customised to any healthcare setting. 


Box 11.1. Five Transitions for Patient Safety 

e Understanding risk and harm through the patient’s eyes 

e Assessing both benefit and harm across episodes of care 
e Patient safety as the management of risk over time 

e Varying safety models dependent on context 

e Using a wider range of safety strategies and interventions 


Seeing Safety Through the Patient’s Eyes 


Our current approach to patient safety, seen from the perspective of healthcare pro- 
fessionals, assumes generally high quality healthcare punctuated by safety incidents 
and adverse events. This is a sincere vision in that professionals naturally assume 
that for the most part they are giving good care though they know that there are 
occasional lapses. In contrast we have endeavoured to see safety through the 
patient’s eyes. A patient may receive wonderful care during one hospital admission, 
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followed by decline due to inadequate monitoring in the community which is later 
corrected and their health restored; our five levels of care are a formalisation of 
these varying standards of care that are experienced along the patient journey. This 
is a vision of safety from the perspective of the patient, carer and family which is the 
reality we need to capture (Box 11.2). 


Box 11.2. Seeing Safety Through the Patient's Eyes 

e Isolated errors and incidents are generally less important than the overall 
coordination of care and the avoidance of major lapses. 

e Coordination of care acquires a much greater importance as a safety issue. 

e Patients with multiple problems face major challenges in coordinating 
their own care which can be a considerable burden and source of anxiety. 

e Safety interventions to support patients at home will need to focus on 
organisational interventions such as rapid response to crises and coordina- 
tion between agencies. 

e The healthcare system needs to give more attention to the perspective of 
patients and families in monitoring and maintaining safety. 


Most people understand that all healthcare involves a degree of risk. The level of 
risk that is accepted must be outweighed by the expected benefits and should be 
openly expressed. Failures in the healthcare system will always occur to some 
degree but their consequences can be limited by honesty, transparency, early 
response and mitigation. We believe, though this could be formally researched, that 
this is the pragmatic view that most people take of their healthcare. Medicine 
reduces suffering and improves our lives in many ways but is necessarily limited in 
what it can achieve. What counts for us as patients is whether healthcare improves 
our lives overall and whether it lives up to our expectations both technically and in 
the manner in which the care is provided. The engagement and relationship with 
clinical staff is important in itself but also affects the overall assessment of whether 
the care has been beneficial or harmful. 


Considering Benefit and Harm Along the Patient Journey 


Seeing safety through the patient’s eyes has the immediate consequence that we 
need to view safety along the patient journey. This means that we need to exam- 
ine episodes of care and consider both risk and harm within an extended times- 
cale. We can still of course examine specific incidents occurring at particular 
times and this remains a useful exercise. However such an approach will not 
identify all safety issues and it is not well adapted to either understanding or 
improving safety in community settings. This longer term approach has conse- 
quences for the measurement of harm, for methods of analysis and of course for 
safety interventions. 
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The measurement of harm has previously focused on examining the incidence of 
specific adverse events. There is nothing wrong with such an approach; it provides 
important baseline information in particular settings which can be used to monitor 
certain types of harm. However these approaches will need to be extended to assess 
the balance of benefit and harm over time for any one patient and eventually for 
populations of patients. Indicators of the reliability and overall quality of care across 
different healthcare settings might include reduction of repeated hospitalisation, 
time to response to problem, or the wider impact on work and family (Mountford 
and Davie 2010). Ideally we need information systems that can track patients over 
time and provide links between different healthcare settings and forms of treatment. 
In the longer term we need to develop metrics which can assess the holistic contri- 
bution of healthcare to a person’s life, in which overall benefits and harm can be 
assessed and combined. This would truly be a patient centred vision in which the 
totality of healthcare was assessed not simply the disease specific outcomes. This is 
not going to be at all easy but is, we believe, the direction that we need to take. 

Most of our methods of incident analysis have been restricted to relatively short 
time periods within a single hospital admission, although the basic concepts have 
proved robust in other settings such as primary care and mental health. We will have 
to expand these approaches to examine periods of care rather than a specific inci- 
dent and its antecedents. We do not yet have fully developed methods to conduct 
safety analyses over long time periods and so new approaches will need to be devel- 
oped. Initial analyses have shown that very different considerations emerge such as 
the critical role of the timing of decisions and actions in the clinical process 
(Amalberti and Brami 2012). These new forms of analysis will need to encompass 
a timeframe sufficient to embrace initial assessment, provision of treatment, moni- 
toring the result, and responding to complications while continuing to deliver care. 
These analyses are likely to place a much greater emphasis on the detection and 
recovery from problems in the delivery of care. 


Patient Safety as the Management of Risk Over Time 


We have now arrived at a rather different view of patient safety which includes, but 
does not conflict with, definitions focused on the reduction of error and harm. The 
revised aim of patient safety is to maximise the overall balance of benefit and harm 
to the patient, rather than specifically to reduce errors and incidents. Patient safety 
becomes the management of risk over time as the patient and family move through 
the healthcare system. The benefit may be expressed as recovery whenever possible, 
reduction of suffering or extended survival. This is of course the aim of clinicians 
everywhere when treating individual patients but we are concerned with how this 
might be achieved across a system. 

The reduction of harm remains important, as does the reduction in errors and 
incidents, but it is not the dominant perspective. Incidents associated with care will 
always occur during episodes of care since no human activity can be error free, 
especially across a system with open access 24 h a day and 7 days a week. Harm 
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may occur because of single safety incidents but more commonly from an accumu- 
lation of poor care that impedes recovery, worsens the prognosis or prolongs dis- 
ability unnecessarily. Patient safety is both the art of minimizing these incidents and 
managing risk over longer time periods which will require additional skills and 
methods. We accept in this vision that errors will inevitably occur but that, in a safe 
system, very few will have any consequences for the patient. This is in essence a 
clinical vision but at the level of the system as well as the individual patient. Note 
that this view gives considerable emphasis to the achievements of patients, families 
and staff in monitoring, negotiating, adapting and recovering from the inevitable 
hazards and failures along the patient journey. 


Adopting a Range of Safety Models 


Safety needs to be approached very differently in different environments. We have 
initially distinguished three classes of safety models that fit different field demands: 
the adaptive model embracing risks, the high reliability model managing risks, and 
the ultra-safe model in which risk is controlled or avoided wherever possible. These 
different responses to risk give rise to different models of safety, each with their own 
advantages and limitations. The differences between these models lie in the trade-off 
between the benefits of adaptability and the benefits of standardisation and control. 

Healthcare has many different types of activity and clinical settings and so we 
cannot use one primary model (Box 11.3). We can see parallels and applications of 
the three models relatively easily in the hospital environment. Radiotherapy, blood 
products, imaging systems and the management of drugs in pharmacy are all highly 
regulated, very reliable and operate to industrial standards of precision. Many of 
these systems rely on a high degree of automation and decision support and the 
professionals working in these areas are accustomed to working in a highly ordered 
manner. In other settings, such as obstetrics and elective surgery, risk has to be 
accepted and managed with coordinated teamwork. High risk surgery, trauma medi- 
cine and the treatment of rare and dangerous infections require a more adaptive 
approach though all benefit from a foundation of standard procedures. We should 
also bear in mind that much adaptation and resilience in healthcare is unnecessary 
in that it is employed not from clinical necessity but to compensate for wider system 
deficiencies (Wears and Vincent 2013). 


Box 11.3. Safety Models for Healthcare 

e There is no one universal model of safety in healthcare that can apply 
across every setting. Each model has its own advantages, limitations and 
challenges for improvement. 

e The choice of a safety model will derive from professional consensus, 
from real world experience, an understanding of safety and judgements as 
to what is politically feasible in the context in question. 
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e Imposition of a given safety model that is inappropriate to the context in 
question may not be effective and may sometimes even degrade safety. 

e Each model has similar potential to improve safety in healthcare by a fac- 
tor of 10, although the maximum attainable safety figures are context 
dependent and can vary considerably from one model to another. 


In healthcare we may find we need a wider array of models than the three we 
have outlined. It would be a mistake to assume that these three broad approaches are 
all we need; they are a helpful simplification of a more complex problem. For 
instance care in the community is unusual in being highly distributed amongst dif- 
ferent people and organisations and also only partially reliant on strict standards. 
Many industries would manage a very distributed system by careful standardisation 
of core procedures but this may not be possible when, for instance, managing the 
care of people with severe mental health problems in the community. We are also 
aware that the industries we have chosen to illustrate the differing approaches to 
safety are high hazard, high technology and, while those who work in them support 
each other, they are not simultaneously concerned with delivering compassionate 
care to vulnerable people. We will probably need a more thoughtful approach to the 
systemic management of risk in the care of people with learning disabilities for 
instance, which will retain the broader strategic understanding but achieve the 
objective of managing risk through personal relationships as much as through for- 
mal strategy. 

We will also need to consider how we can move between models. When, for 
instance, does a previously adaptive approach become sufficiently embedded and 
understood to begin the transition to a high reliability approach? In part this comes 
about from innovation, familiarisation and the building of expertise within a com- 
munity. Innovative surgery for instance always begins in a context of risk and chal- 
lenge. As experience grows in, for instance the management of aortic aneurysm, the 
surgery still carries risks but these are known, understood and managed rather than 
endured. 

A patient’s journey crosses many medical settings and services, in different con- 
texts, and therefore is necessarily exposed to the whole range of safety models. 
Controlling risk not only requires managing each setting and the transitions between 
settings, but also being alert to the fact that safety interventions that are effective in 
one setting may adversely affect safety in other contexts. For instance a cautious and 
restrictive control of laboratory services aimed at reducing error that is effective in 
raising standards locally, might adversely affect safety more widely through the 
reduction in the availability of timely laboratory results. 

The external environment is also a critical determinant of which approach to 
safety can be adopted. An ultra-safe system relies not only on internal procedures, 
standardisation and automation but also on being able to control the external environ- 
ment and working conditions. This is achieved by limiting exposure to risk, as when 
an airline grounds flights in bad weather, and also by controlling working conditions 
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so that there are, for example, strict controls on how many hours civil aviation pilots 
can fly and how long they must rest before flying again. With enough resource this 
would be achievable in some areas of healthcare, and indeed some areas are already 
very safe. However if we cannot control the demand and working conditions, we 
necessarily have to rely on more adaptive approaches to safety; a different model 
may be intrinsically safer but simply not feasible in a particular context. While civil 
aviation is indeed a source of inspiration and learning such a model is only currently 
applicable in a relatively limited set of circumstances in healthcare. The approach 
taken to safety in any healthcare setting may ultimately depend in part on what is 
politically feasible which will vary by discipline, organization and jurisdiction. 


Developing a Wider Range of Safety Strategies 


The dominant vision of safety improvement is to increase the reliability of basic 
procedures. These might be the standard procedures in operating theatres, the pre- 
vention of venous thromboembolism or procedures to minimise central line or other 
infections. A number of major interventions have shown that with sufficient will, a 
sophisticated approach to implementation and the necessary resources, reliability 
can be markedly improved in a least a set of core processes. 

We still have very limited safety strategies for dealing with the day to day realities 
of healthcare. The dangers to patients when staff are working in difficult conditions 
are sometimes discussed though generally in terms of the need for more staff which 
may, of course, be a reasonable request; if more staff were available, or their time 
was better used, then it might be possible to meet core standards. However in health- 
care we will never be able to meet basic standards all the time and in all contexts. We 
need therefore to relinquish the hope that we will ever be able to do this in all circum- 
stances and pose a different question. How can we ensure that care is safe, even if not 
ideal, when working conditions are difficult? How, for instance, should one manage 
an emergency department at times of very high workload or during major emergen- 
cies when the care of some less seriously ill patients is inevitably delayed or compro- 
mised. What strategies are available to a young nurse of doctor faced with an absurd 
workload, multiple competing demands and many sick patients? People do adapt and 
cope of course, but on an individual basis rather than with a considered team based 
strategy. Developing considered approaches to the management of risk in such situ- 
ations is a priority for the next phase of patient safety (Box 11.4). 


Box 11.4. Developing a Wider Range of Safety Strategies 

e We should extend our safety strategies to include risk control, monitoring 
and adaptation, and mitigation 

e We must not be ashamed to propose strategies that aim to manage risk 
rather than optimise care as long as the final result is beneficial to the 
patient and robust to context. 
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e Developing and implementing considered team based responses to difficult 
working conditions will be safer than relying on ad hoc improvisation 

e Healthcare uses a very limited set of safety interventions. The limited 
progress in patient safety is partly due to the underuse of the available 
strategies and interventions. It is like driving a car and only using first gear. 


We also need to consider how best to customise specific safety interventions. For 
example reviews of studies of interventions to reduce falls have provided conflicting 
evidence of effectiveness — some studies showed strong effects, others none. Frances 
Healey and colleagues argued that the conflict is only apparent and due to the fact 
that two very different kinds of interventions have been tested; some trials adopted 
a one size-fits-all implementation of a set bundle of procedures while others, in 
contrast, developed an individualized approach to each patient with responsive care 
planning and post-fall review. The standard intervention has been shown in large 
randomized controlled trials to have little effect; the more personalized approach, 
which stresses an adaptive response to risk, is proving very much more effective. 
Healey comments that this ‘makes complete sense in the context of falls risk being 
a complex combination of intrinsic and extrinsic factors and personal attitudes to 
risk, in an acute environment where physical condition and therefore falls risk fac- 
tors are rapidly changing’ (Healey et al. 2014 and personal communication 2015). 


A Compendium of Safety Strategies 


We have proposed five broad safety strategies each associated with a family of inter- 
ventions. We have provided illustrations of how each strategy might be applied in 
hospital, home and primary care. The reality is no doubt considerably more compli- 
cated and needs to be further explored. But even now, with incomplete understanding, 
we can set out a suite of potential interventions to improve safety and manage risk. 

Table 11.1 brings together many of the strategies and interventions described in 
previous chapters and offers some comments on their applicability, current use and 
challenges for implementation. The strategies and interventions can operate at dif- 
ferent levels and have divided these into frontline, organisation and system levels. 
This is not a complete account by any means as, for one thing, we have not included 
patients and families as users of these approaches. However it makes the general 
point that some interventions are more useful on the frontline while others are more 
useful at system level. Care bundles for instance are a frontline team intervention, 
although managers and regulators may encourage and even mandate their use. Risk 
control approaches can be used within a clinical team in deciding not to start an 
operation unless all the equipment is available. However, most risk control interven- 
tions, such as restricting demand or controlling working conditions, will be at 
organisation or system level and require considerable authority to implement. To be 
effective of course they also need the backing of frontline staff. 
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We realise that these proposals are just a starting point in that considerable work 
is needed to map and articulate the full range of strategies and interventions that are 
currently in use and which might be adopted. This has been done for ‘best practice’ 
approaches, and to some extent for interventions to improve the system. But we 
need a much fuller description of all types of strategy and intervention if we are to 
develop a truly comprehensive approach to safety. 

We can point to similar developments in other fields which may serve as a model 
for how this might be done. There is, for instance, enormous interest in influencing 
the behaviour of people in a variety of ways; these include diet, smoking, exercise, 
road safety, the payment of taxes and a host of other policy objectives. There are 
numerous psychological and social theories which purport to explain changes in 
human behaviour through a variety of mechanisms each with implications for inter- 
vention. In weight loss for instance one might seek to enhance self-esteem as a 
means of increasing adherence to a diet or place more emphasis on extrinsic motiva- 
tions such as offering financial incentives (Box 11.5). Susan Michie and colleagues 
have developed the Behaviour Change Wheel (BCW), a synthesis of 19 frameworks 
of behaviour change found in the research literature (Michie et al. 2013). The BCW 
has at its core a model of behaviour known as COM-B standing for capability, 
opportunity, motivation and behaviour. The BCW identifies different intervention 
options that can be applied to changing each of the components and policies that can 
be adopted to deliver those intervention options. 


Box 11.5. Contrasting Approaches to Changing Risky Behaviour 

Suppose one wished to reduce the propensity of young drivers to engage in 
risky driving practices such as driving too fast. One would canvass all the 
options including improving their ‘capability’ to read the road and adjust their 
driving to the conditions, restricting their ‘opportunity’ to drive recklessly by 
means of speed limiters or speed humps, and establishing whether a promis- 
ing approach would be to try to change their ‘motivation’ to drive safely 
through mass media campaigns or legislation and enforcement. Any or all of 
these may have some effect. The Behaviour Change Wheel provides a sys- 
tematic way of determining which options are most likely to achieve the 
change required. 


Adapted from Michie et al. (2014) 


Changing behaviour is of course one way of managing risk, particularly in 
respect of adherence to safety critical procedures. However, in this context, we are 
drawing a broader parallel with the strategic approach to classifying, interpreting 
and designing interventions. Michie and colleagues point, as we do, to the plethora 
of potential interventions, to the fact that most interventions are used singly or in 
limited combinations. Their approach has been to draw out the distinguishing fea- 
tures of each approach, to classify and integrate in a broad conceptual framework of 
behaviour change interventions. 
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Our ‘incomplete taxonomy’ is a first step towards a similar initiative in the sys- 
temic management of risk in healthcare and potentially in other settings. We now 
need to map the landscape, assess the distinctive assumptions and approach of each 
strategy and intervention and begin to consider how to customise and combine the 
interventions to the challenges facing us. At the moment, in most cases, we are only 
using a fraction of the potential interventions open to us. Drawing on the full range 
and intervening at all levels of the system would give us much more leverage and 
power in confronting the challenges of keeping healthcare safe in a time of austerity 


and rising demand. 


Key Points 


There are five major transitions between the current vision of patient safety 
and the broader one we need for the future. 

Our current approach to patient safety assumes generally high quality 
healthcare punctuated by occasional safety incidents and adverse events; 
this as a vision of safety from the perspective of healthcare professionals. 
We need to also understand risk and harm through the patient’s eyes 
Viewing safety through the patient’s eyes has the immediate consequence 
that we need to view safety in the context of the patient journey. This 
means that we need to examine episodes of care and consider both benefit 
and harm within an extended timescale. 

Patient safety is the art of minimizing incidents but also managing risk 
over longer time periods which will require additional skills and methods. 
We accept in this vision that errors will inevitably occur but that, in a safe 
system, very few will have any consequences for the patient. 

Safety needs to be approached very differently in different environments. 
Healthcare has many different types of activity and clinical settings and so 
we cannot use one primary model. 

We need to develop a wider range of safety strategies and interventions. 
We should extend our safety strategies to include risk control, monitoring 
and adaptation, and mitigation 

We have very limited safety strategies for dealing with the day to day reali- 
ties of healthcare. People adapt and cope, but on an individual basis rather 
than with a considered team based strategy. Developing considered 
approaches to the management of risk in such situations is a priority for the 
next phase of patient safety. 

A compendium of safety strategies and interventions is already available. 
The slow progress in patient safety is in part due to the fact that we are not 
using the full range of interventions available. It is like driving a car using 
only first gear. 

Considerable work is needed to map and articulate the full range of strate- 
gies and interventions that are currently in use and which might be adopted. 
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We have put forward a series of arguments culminating in the idea that patient safety 
should be viewed as the management of risk over time. We have suggested that 
healthcare could draw on a much wider repertoire of strategies and interventions to 
manage risk and enhance safety. This has been a book of ideas and argument but we 
hope that these are both rooted in practice and have practical application. In this 
chapter we first consider some of the more immediate implications as we see them 
and then consider the form a longer term exploration and development might take. 


Implications for Patients, Carers and Families 


The engagement of patients in patient safety has been a slow and difficult process. 
Much of the initial effort has gone into engaging patients alongside staff in report- 
ing and acting on safety issues. This has been a valuable exercise but there is 
always (rightly) going to be a limit on what it is reasonable or feasible for patients 
to take on in hospital. We should now turn our attention to the home and commu- 
nity which will pose very different safety challenges. For instance, nosocomial 
infections are common in hospitals but we have developed effective ways of coun- 
tering them which rely on close monitoring and a rapid clinical and organisational 
response. In the home, the risk of nosocomial infections may be less but other risks 
arise from the open environment, frequent visitors and varying standards of 
hygiene. Safety is a moving balance between accepted risks and available solu- 
tions; you can improve safety either by changing the exposure to risk or improving 
solutions. 

In the home and community patients are in charge of care, and therefore respon- 
sible for safety, capable of making errors and being influenced by the many factors 
that affect safety. This is more than engagement, shared decision making or partner- 
ship. Patients and families are taking on roles and responsibilities that are in other 
settings restricted to professionals. This raises a host of issues for the management 
of risk and indeed for the delivery of services generally. 
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We know that patients and families take safety very seriously and are ingenious 
in managing many potentially dangerous scenarios. We have given examples in the 
book and no doubt many more could be collected and studied to reveal novel strate- 
gies and interventions which could be shared, adapted and potentially used more 
widely. Our five strategies can be used to pose some immediate questions about the 
risks managed by patients and families. What training should be given? If a profes- 
sional needs training to, for instance, change a dressing while maintaining sterile 
conditions then surely patients and carers need training too. To what extent can 
standards of hygiene be relaxed simply because a sick person has moved from hos- 
pital to home? We may need to consider setting standards and controlling the envi- 
ronment in which care can be delivered. What kind of support do patients and 
families need if they are to monitor safety and act appropriately on signs of deterio- 
ration? The example of home haemodialysis given earlier shows that advanced units 
are now including a suite of safety strategies in their training for patients and fami- 
lies. This could potentially be replicated, in varying degrees of intensity, for other 
forms of care outside hospital. 


Implications for Frontline Clinicians and Managers 


In healthcare the word frontline is generally taken to mean clinical staff in direct 
contact with patients and whose actions and decisions have immediate effects. 
Managers do not deliver treatment and so are not frontline in that sense. They are 
frontline however in the sense that the actions of clinical managers have a very 
powerful influence on safety. A bed manager in a large hospital for instance is con- 
stantly juggling patients and beds, assessing the latest request for an urgent bed, 
trying to place patients in wards that are at least reasonably appropriate and prevent- 
ing very sick patients being in wards where the staff are not familiar with their 
needs. ‘Being in the wrong place’ is high risk if you are very sick. Clinical managers 
have a huge influence on safety but we know little about the strategies they use. 

Both clinicians and managers can do a great deal to improve the standards and 
value of incident analysis. In the United Kingdom at least what was once an exercise 
in learning, reflection and improvement has, in some settings, sadly deteriorated 
into a largely bureaucratic exercise producing numerous recommendations that can 
never be implemented. There is an urgent need to return to the original purpose of 
incident analysis, focus on the comprehensive investigation of a much smaller num- 
ber of events and consider the findings in the context of an overall safety and quality 
improvement programme. This can all be achieved with methods we already have. 
We also however need to explore the analysis of episodes of care with the attendant 
attention to contributory factors at different points, adaptation and recovery from 
problems, and much greater attention to the accounts of patients and families. 

We believe that patients and families should select a proportion of the analyses 
and be encouraged to contribute as much as they can to analyses; their perspective 
is obviously particularly critical outside hospital. Their perspective will help us 
understand the longer term safety problems and to develop new techniques and 
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innovations. This perspective might seem utopian and to require huge resources; it 
would certainly require some careful organisation and the use of technology to 
bring in some participants. As before though, quality is more important than quan- 
tity. A relatively small number of thorough investigations can produce a huge 
amount of useful information about the vulnerabilities, defences and resilience of 
the healthcare system. 

Frontline teams, with management support, can initiate a much wider and more 
strategic programme of risk management than is currently the case. We could envis- 
age the development of a decision tree in which different strategies and interven- 
tions could be considered sequentially, both separately and in combination, as 
candidates to enhance safety in any particular setting and in response to identified 
problems. Improving standards of practice is the most common approach to safety 
on the frontline and, if achievable, is an obvious and necessary first step. Next there 
are multiple ways of improving the wider system, though many are not in the con- 
trol of frontline teams. A critical task is to identify points in the system where inef- 
ficient processes and poor reliability are forcing time wasting and potentially 
dangerous workarounds; the adaptations are of course necessary at the time but 
wasteful in that they are simply a compensation for other deficiencies rather than a 
necessary response to problems or crisis. Coping in the short term is admirable and 
may be in the best interests of that particular patient but the longer term this attitude 
is detrimental to safety in that it simply prolongs the underlying problems and 
removes any incentive for change. Risk controls, achieved with professional and 
management consensus, protect both patients and staff and could bring order and 
calm to currently chaotic systems. In emergencies of course risk controls can and 
should be over-ridden. 

Monitoring, adaptation and response can be misused but is nevertheless an abso- 
lutely critical safety strategy at every level of the system. A great deal has been 
achieved in team training in anaesthesia, surgery, emergency medicine and other 
clinical contexts. The skills of monitoring, cross checking and other features of 
human factors team training are widely taught and such programmes have been 
shown to improve safety and clinical outcomes. We need to devote much more 
energy to understanding how people at every level of the system adapt and respond 
to safety critical issues and develop methods of preparation and training in these 
skills. 

One important direction of travel would be a parallel exploration of how these 
and other strategies are used by managers, particularly those directly involved in 
clinical services. Managers constantly adapt and firefight; how much is necessary 
and how much unnecessary and due to poor systems? Which strategies and inter- 
ventions are currently used day-to-day and at times of crisis and which would be 
optimal? We in no way wish to denigrate the skill and dedication of managers who 
go to extraordinary lengths to maintain safety. Rather, we want to move away from 
ad hoc improvisation towards explicit and planned interventions, preparation and 
training in the use of a portfolio of strategies and interventions. A huge amount 
could be learned from studying the ways managers adapt and cope and by refining 
this into a more strategic approach. A customised safety training programme for 
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managers, or perhaps pairs of managers and clinicians, would be high on our wish 
list for the future of safety. 


Implications for Executives and Boards 


In the United Kingdom and some other countries boards governing healthcare insti- 
tutions include people from other sectors who bring very different expertise and 
perspectives. To an engineer, for instance, it can be very difficult to appreciate that 
what is tolerated in healthcare is very different from what is tolerated in engineer- 
ing. Incidents brought to the attention of boards are often understood as horrifying 
and unusual departures from best practice, rather than as the inevitable by-product 
of the multiple vulnerabilities of an overstretched system. The most critical realisa- 
tion at board level is the recognition of the extent of poor reliability, difficult work- 
ing conditions and the corresponding necessity for ad hoc improvisation and cutting 
corners that is frequently necessary and often actively encouraged. Even clinical 
members of boards, who know this from daily experience, may struggle to make 
this explicit. This is a necessary background understanding to any effective action 
on safety and the inevitable compromises and trade-offs necessary in the delicate 
and fluctuating balance between finance, safety, quality and patient experience. 

An important observation in the implementation of the recently developed frame- 
work for the measurement and monitoring of safety has been that the core ideas 
appear to resonate in different settings and at different levels of the healthcare sys- 
tem. This is valuable in that an organisation could potentially cohere around a core 
set of safety questions which are meaningful to staff at all levels. We do not know 
how our framework of strategies and interventions will be received and to what 
extent they will be applicable at different levels of the system. We are conscious that 
the language and practice of safety improvement is more akin to frontline practice, 
while the language of control, assurance and mitigation are more familiar to those 
at executive, regulation and policy level. It would be enormously valuable if the 
safety community could find a language and practice that spanned all levels and 
contexts, and which resonated with patients, frontline staff, executives and regula- 
tors alike. We believe that it is achievable and could provide a much needed clarifi- 
cation and integration of safety initiatives. 

Boards too can employ a much wider range of strategies and interventions. A 
strategic combination of approaches and interventions is necessary to achieve opti- 
mal safety in the face of financial restrictions and constraints. An expansion of 
safety strategies may allow them to employ approaches such as risk control which 
are more familiar and akin to those employed in the management and oversight of 
finance. Boards often associate improving safety with spending more money, but a 
judicious combination of strategies and interventions may allow safety interven- 
tions to at least be cost neutral overall. One might imagine for instance that controls, 
restrictions and improved reliability would reduce costs and permit the development 
of a programme for managers aimed at optimising the simultaneous management of 
safety, cost, quality and patient experience. This also may sound optimistic but we 
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believe is possible given a sufficiently wide and well thought out safety 
programme. 

At this level of an organisation the integration of strategies and programmes and 
the explicit trade-off between objectives is a critical skill. An organisational or 
regional change strategy is generally a combination of individual sub-programmes 
developed and led by different directors. The individual programmes almost inevi- 
tably conflict with each other. For example the ideal plan for reducing the debt at a 
satisfactory pace is generally detrimental to investments in staff and new technology 
and ultimately quality and safety. 

The development of the final strategy will rest ultimately with the Chief 
Executive, the board and a small group of senior leaders. They must arbitrate 
between the individual directors and programmes, create and maintain an overarch- 
ing vision which encompasses all the objectives of the organisation. There are good 
and bad ways of achieving these compromises; each director must be willing to 
adapt his or her particular programme and integrate with other organisational objec- 
tives and plans. The Chief Executive and other senior leaders need to be skilled in 
arbitrating and negotiating with all concerned to achieve a plan which achieves the 
objectives of the organisation without unduly compromising frontline quality and 
safety. 

Scenarios of this kind are common currency in business school executive pro- 
grammes but they very seldom include safety issues, at least for healthcare. 
Developing scenarios in which safety is managed in a realistic and clear sighted 
way in the face of financial pressures would be a major step forward in the manage- 
ment of risk. A particularly critical issue is the recognition of the early signs of 
organisational failure, both for those running organisations and for those attempt- 
ing to monitor them externally such as regulatory agencies and government. 
Executive courses aimed specifically at the development of strategies which simul- 
taneously address safety, finance and other organisational objectives are being 
developed and trialled in the oil and gas industries but have not yet been initiated 
in healthcare. 


Implications for Regulatory Agencies and Government 


Regulatory agencies face some major new challenges. Until now most regulation 
has focused on individual healthcare professionals or specific organisations and 
institutions. Regulation in its various forms now needs to extend to encompass new 
organisational forms and the complex series of transitions and interfaces along the 
patient journey. The accreditation of new types of organisation is already in prog- 
ress in many countries but still requires further development; it is often not clear, for 
instance, what jurisdiction regulators have over patients living relatively indepen- 
dently in residential care. Traditional approaches to certification, inspection, and the 
corresponding evaluation criteria may have to be adapted considerably. To move 
from accreditation of structures and institutions to accrediting patient journeys 
across primary, secondary and home care is a huge challenge. 
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A second major challenge is to find a way of regulating a very rapidly evolving 
system. Regulators in most other industries are blessed with a relatively static envi- 
ronment in which standards can be set and maintained over years or even decades; 
there is innovation of course but it does not usually lead to a change in core stan- 
dards, simply a better way of meeting them. In aviation or the nuclear industry 
major changes may take 10 years from initial proposal to eventual implementation 
allowing ample time for the development of professional consensus, formal trials 
and the gradual absorption into the regulatory framework. 

In contrast, the rapid pace of innovation in investigations and treatments in 
healthcare means that the regulator inevitably lags behind innovation. The fast pace 
of innovation makes developing new standards very challenging; standards can be 
developed quickly and adapted to a rapidly changing environment but only with a 
consequent reduction in rigour and testing, since formal evaluation cannot possibly 
be achieved within the time available. The present system cannot cope with the pace 
of innovation but it is far from clear how to develop new and more responsive modes 
of regulation. 

Politicians and others at very senior level are under pressure to maintain the fic- 
tion that every citizen can have optimal healthcare. In private at least, it is absolutely 
critical that government and regulators recognise the vulnerabilities of the system 
and the gap between what is intended and what is actually delivered. The idea of 
absolute standards is naive and potentially dangerous especially for struggling 
organisations. Innovation and the implementation of new and improved standards, 
all desirable, place huge pressures on both individual organisations and the wider 
system and create new safety issues. Many regulatory agencies understand this very 
well but may nevertheless struggle to find an effective response to the issue. The 
problem of regulation is often conceived as the problem of finding good ways to 
detect this gap and identify poorly performing organisations. It is essentially a “best 
practice’ view of safety. However, the deeper problem of regulation is not so much 
identifying the departure from standards but about how to manage that gap intelli- 
gently and humanely. The problem in our terms is one of monitoring, adaptation and 
response and to develop approaches that are strategic rather than improvised. 

Regulatory agencies have developed very comprehensive approaches to inspec- 
tion and have devoted most of the energies to monitoring compliance with stan- 
dards. Much less attention has been given to the critical issue of how to respond 
when standards are not achieved. In many cases the response seems little more than 
admonition, threats and re-inspection. A basic risk control strategy would mean 
closing or limiting facilities when an inspection reveals fundamental problems but 
this threat is usually met with strong local resistance. The healthcare system either 
needs to overcome these obstacles or take stock and accept that no facilities cannot 
and develop a more sophisticated response to lapses in standards. We need, just as 
at other levels of the system, to consider how organisations and regulators might 
work together in a process of adaptation and ongoing monitoring of the gap between 
the ideal and the real. Delay in bringing the organisation to the point of compliance 
with standards, which can take months or even years, can be dangerous but there is 
seldom any explicit discussion of how to manage safety in the interim. The art of 
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negotiation of realistic timescales for change and compliance needs exploration, 
research and development. 


Future Directions for Research and Practice 


This short book and these proposals are a first step. We believe that there are imme- 
diate implications but recognise that if the ideas have merit then they need to be 
debated, developed further and tested in practice by a community of people. The 
table in Chap. 11 provides, as we expressed it, an incomplete taxonomy. We know 
that much more work is need to map the full set of strategies and interventions, 
assess the value of the overall framework, the nature and purpose of the various 
interventions and their effectiveness in practice. Our experience so far from the 
small group of people who generously found time to read an earlier draft is that they 
recognised the need for a broader view of safety, for a breadth of strategic approach 
and particularly to the need to customise approaches to safety to different settings 
and along the patient journey. 

The next step is broadly ethnographic. We need to observe, identify and collate 
safety relevant strategies and interventions at all levels of healthcare organisations 
and the wider system. Ideally these could be compared and matched with 
approaches taken in other industries. From there we could develop a more robust 
taxonomy of approaches and begin to assess which might be applicable in different 
contexts. A considerable amount of research and empirical work is needed to map 
the full set of strategies and interventions currently in use, who they are used by 
and in what context. From this point we could envisage empirical testing of differ- 
ent approaches and combinations of interventions, similar to those already devel- 
oped for best practice and system improvement but employing a wider repertoire 
of approaches and, most important of all, being tested at every level of the 
system. 

Many ideas and approaches to safety have been advanced; the very term safety 
has been contested and defined in numerous ways. We have a plethora of concepts 
and organisational ideals to guide us on the safety journey. Many of these ideas 
however have remained as ideas and not found a concrete expression or applica- 
tion. Our approach in contrast, abstract as it may seem to some, is resolutely 
practical in intention. The safety strategies and approaches we describe are all in 
use but have not been drawn together in a comprehensive architecture which 
attempts to embrace all healthcare settings. We have found in previous work that 
a unifying framework can be valuable to those managing safety at all levels of the 
healthcare system. We hope that our proposals and the attempt to develop an 
architecture of safety interventions will be useful now and productive for the 
future. 
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